CVE-2026-79887
CVE-2026-79887 · Authentication Bypass in Web Interface of AOS-8 allows Remote Command Execution (RCE)
This page contains facts from public vulnerability sources. Check the original advisory before updating.
A vulnerability in the web interface of AOS-8 could allow an unauthenticated remote attacker to achieve remote code execution. Successful exploitation could lead to complete device control, enabling interception of network traffic and potential compromise of connected systems.
CVSS 8.1 · High · EPSS 0.3%
- Published
- Updated
Affected products and versions
arubaos (aos)
- Versions
- ≥ 8.13.0.0, ≤ 8.13.3.0: Affected (semver)
- ≥ 8.10.0.0, ≤ 8.10.0.23: Affected (semver)
No fix published