p PatchFirst

CVE-2026-79871

CVE-2026-79871 · Unauthenticated Sensitive Information Disclosure in the Command Line Interface of AOS-10

This page contains facts from public vulnerability sources. Check the original advisory before updating.

A sensitive information disclosure vulnerability in the command line interface of AOS-10 could allow an unauthenticated remote attacker to access sensitive information. Successful exploitation could allow an attacker to retrieve information which could be used to potentially gain further access to network services supported by AOS-10.

CVSS 9.6 · Critical · EPSS 0.2%

Published
Updated

Affected products and versions

  • arubaos (aos)

    Versions
    • ≥ 10.8.0.0, ≤ 10.8.1.1: Affected (semver)
    • ≥ 10.7.0.0, ≤ 10.7.2.6: Affected (semver)
    • ≥ 10.4.0.0, ≤ 10.4.1.13: Affected (semver)

    No fix published

Original sources

Check your server →