CVE-2026-79889: Multiple Unauthenticated Buffer Overflow vulnerabilities in AOS-8 Web Interface result in Remote Code Execution

Published Oct 22, 2026

Updated

No description provided

Affected Software

1 affected component

HPE Arubaos

Event History

Oct 22, 2026

CVE Published

via MITRE·07:06 PM

Data Sourced

via MITRE·07:06 PM

DescriptionSeverity

Frequently Asked Questions

Which deployments are exposed to this issue?

The affected product is HPE ArubaOS, and the vulnerable component is the AOS-8 web interface. Systems where that interface is reachable over the network are the relevant exposure population.

Does exploitation require authentication or user interaction?

No. The supplied vector lists PR:N and UI:N, indicating an attacker does not need privileges or user interaction to exploit the issue.

What impact could successful exploitation have?

Successful exploitation can result in remote code execution. The supplied severity vector indicates high impact to confidentiality, integrity, and availability.

Is exploitation expected to be straightforward?

The supplied vector lists AC:H, meaning exploitation has high attack complexity despite being network-accessible and unauthenticated.

CVE-2026-79889: Multiple Unauthenticated Buffer Overflow vulnerabilities in AOS-8 Web Interface result in Remote Code Execution

Affected Software

Event History

Frequently Asked Questions

Which deployments are exposed to this issue?

Does exploitation require authentication or user interaction?

What impact could successful exploitation have?

Is exploitation expected to be straightforward?

Company

Resources

Contact

Frequently Asked Questions

Which deployments are exposed to this issue?

Does exploitation require authentication or user interaction?

What impact could successful exploitation have?

Is exploitation expected to be straightforward?