CVE-2026-79857

CVE-2026-79857 · Unauthenticated Command Injection Vulnerability in AOS-8 PAPI Protocol

This page contains facts from public vulnerability sources. Check the original advisory before updating.

There is a command injection vulnerability in the PAPI protocol (Aruba's access point management protocol) of AOS-8 that could lead to unauthenticated remote code execution by sending specially crafted packets to the affected UDP port. Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system.

CVSS 9.8 · Critical · EPSS 1.3%

Published

2026-10-22T19:05:06.618Z

Updated

2026-10-23T19:36:39.765Z

Check your server →