p PatchFirst

CVE-2026-79883

CVE-2026-79883 · Unauthenticated Adjacent Buffer Overflow Vulnerability in the PAPI Protocol leads to Sensitive Information Disclosure in AOS-10

This page contains facts from public vulnerability sources. Check the original advisory before updating.

A buffer overflow vulnerability in the PAPI protocol of HPE Networking AOS-10 could allow an unauthenticated adjacent attacker to access sensitive information. Successful exploitation could allow an attacker to retrieve information which could be used to potentially gain further access to network services supported by AOS-10, and to interrupt the normal operation of the affected service.

CVSS 8.3 · High · EPSS 0.2%

Published
Updated

Affected products and versions

  • arubaos (aos)

    Versions
    • ≥ 10.8.0.0, ≤ 10.8.1.1: Affected (semver)
    • ≥ 10.7.0.0, ≤ 10.7.2.6: Affected (semver)
    • ≥ 10.4.0.0, ≤ 10.4.1.13: Affected (semver)

    No fix published

Original sources

Check your server →