p PatchFirst

CVE-2026-79847

CVE-2026-79847 · Unauthenticated Buffer Overflow Vulnerabilities leads to Remote Code Execution in AOS-10

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Buffer overflow vulnerabilities in the affected interface of AOS-10 could lead to unauthenticated remote code execution by sending specially crafted packets to the affected interface. Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system.

CVSS 10.0 · Critical · EPSS 0.5%

Published
Updated

Affected products and versions

  • arubaos (aos)

    Versions
    • ≥ 10.8.0.0, ≤ 10.8.1.1: Affected (semver)
    • ≥ 10.7.0.0, ≤ 10.7.2.6: Affected (semver)
    • ≥ 10.4.0.0, ≤ 10.4.1.13: Affected (semver)

    No fix published

Original sources

Check your server →