CVE-2026-79873: Unauthenticated Adjacent Authentication Bypasses in the PAPI Protocol of AOS-10 Leads to Unauthorized Administrative Access

Published Oct 22, 2026

Updated

No description provided

Affected Software

1 affected component

Aruba Networks ArubaOS 10

Event History

Oct 22, 2026

CVE Published

via MITRE·07:05 PM

Data Sourced

via MITRE·07:05 PM

DescriptionSeverity

Frequently Asked Questions

Who can exploit this issue?

The CVSS vector indicates that exploitation can be performed by an unauthenticated attacker on an adjacent network. No user interaction or existing privileges are required.

What is the potential impact if exploitation succeeds?

Successful exploitation can result in unauthorized administrative access. The CVSS vector indicates high confidentiality and integrity impact, with no availability impact listed.

Is a default deployment affected?

The provided information does not state whether the affected PAPI protocol exposure is enabled or reachable in a default ArubaOS 10 deployment.

How can I determine whether my environment is affected?

Review whether Aruba Networks ArubaOS 10 is deployed and whether adjacent-network systems can reach its PAPI protocol. The provided information does not include affected version ranges or detection indicators.

CVE-2026-79873: Unauthenticated Adjacent Authentication Bypasses in the PAPI Protocol of AOS-10 Leads to Unauthorized Administrative Access

Affected Software

Event History

Frequently Asked Questions

Who can exploit this issue?

What is the potential impact if exploitation succeeds?

Is a default deployment affected?

How can I determine whether my environment is affected?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

What is the potential impact if exploitation succeeds?

Is a default deployment affected?

How can I determine whether my environment is affected?