CVE-2026-79883: Unauthenticated Adjacent Buffer Overflow Vulnerability in the PAPI Protocol leads to Sensitive Information Disclosure in AOS-10

Published Oct 22, 2026

Updated

No description provided

Affected Software

1 affected component

HPE ArubaOS 10

Event History

Oct 22, 2026

CVE Published

via MITRE·07:06 PM

Data Sourced

via MITRE·07:06 PM

DescriptionSeverity

Frequently Asked Questions

What level of access does an attacker need?

An attacker must have adjacent-network access. The CVSS vector indicates no privileges and no user interaction are required.

What impact could exploitation have?

The reported impact includes high confidentiality and availability impact, with low integrity impact. Sensitive information disclosure is specifically identified.

Which environments should be prioritized for review?

Deployments running HPE ArubaOS 10 should be prioritized. The available data does not identify affected versions, configurations, or fixed releases.

CVE-2026-79883: Unauthenticated Adjacent Buffer Overflow Vulnerability in the PAPI Protocol leads to Sensitive Information Disclosure in AOS-10

Affected Software

Event History

Frequently Asked Questions

What level of access does an attacker need?

What impact could exploitation have?

Which environments should be prioritized for review?

Company

Resources

Contact

Frequently Asked Questions

What level of access does an attacker need?

What impact could exploitation have?

Which environments should be prioritized for review?