p PatchFirst

CVE-2026-79877

CVE-2026-79877 · Unauthenticated Adjacent Remote Code Execution Vulnerability in AOS-10

This page contains facts from public vulnerability sources. Check the original advisory before updating.

A remote code execution vulnerability in the underlying operating system of AOS-10 could allow an unauthenticated adjacent attacker to execute arbitrary code on an affected device. Successful exploitation could allow an attacker to execute arbitrary commands as a privileged user on the underlying operating system leading to complete system compromise.

CVSS 8.8 · High · EPSS 0.2%

Published
Updated

Affected products and versions

  • arubaos (aos)

    Versions
    • ≥ 10.8.0.0, ≤ 10.8.1.1: Affected (semver)
    • ≥ 10.7.0.0, ≤ 10.7.2.6: Affected (semver)
    • ≥ 10.4.0.0, ≤ 10.4.1.13: Affected (semver)

    No fix published

Original sources

Check your server →