CVE-2026-79872
CVE-2026-79872 · Unauthenticated Buffer Overflow Vulnerability allows Remote Code Execution in AOS-10 and AOS-8
This page contains facts from public vulnerability sources. Check the original advisory before updating.
A buffer overflow vulnerability exists in the underlying operating system of AOS that could lead to unauthenticated remote code execution by an unauthenticated remote attacker. Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system.
CVSS 9.4 · Critical · EPSS 0.3%
- Published
- Updated
Affected products and versions
arubaos (aos)
- Versions
- ≥ 10.8.0.0, ≤ 10.8.1.1: Affected (semver)
- ≥ 10.7.0.0, ≤ 10.7.2.6: Affected (semver)
- ≥ 10.4.0.0, ≤ 10.4.1.13: Affected (semver)
- ≥ 8.13.0.0, ≤ 8.13.3.0: Affected (semver)
- ≥ 8.10.0.0, ≤ 8.10.0.23: Affected (semver)
No fix published