CVE-2026-79851

Published Oct 22, 2026

Last updated 2 days ago

CVSS critical 10.0

Overview

Description
Buffer overflow vulnerabilities exist in the affected interface of AOS-10 that could lead to unauthenticated remote code execution. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system, leading to complete system compromise.
Source
security-alert@hpe.com
NVD status
Received

Risk scores

CVSS 3.1

Type
Secondary
Base score
10
Impact score
6
Exploitability score
3.9
Vector string
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Severity
CRITICAL

Weaknesses

134c704f-9b21-4f2e-91b3-4a467353bcc0
CWE-119

Social media

Hype score
Not currently trending

  1. 1/5 HPE patched 72 ArubaOS vulnerabilities. Eight score CVSS 10.0. CVE-2026-79844 through CVE-2026-79851 can enable authentication bypass or remote code execution without privileges or user interaction. No public exploit or attacks were reported at release. 🧵 https://t.co/nU

    @SOCMinute

    25 Oct 2026

    28 Impressions

    0 Retweets

    1 Like

    0 Bookmarks

    1 Reply

    0 Quotes

References

Sources include official advisories and independent security research.