Skip to content
OpenAdvisories
High · 8.5 CVE-2026-79881 EUVD-2026-108381GHSA-3947-3w85-j3rm

Authentication Bypass Leading to Remote Code Execution in AOS-8

Published Oct 22, 2026 · Updated Oct 30, 2026 · Assigned by hpe

Description

An authentication bypass vulnerability in the underlying operating system of AOS-8 could allow an unauthenticated remote attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system leading to complete system compromise.

Affected products

VendorProductAffectedFixed
Hewlett Packard Enterprise (HPE) ArubaOS (AOS) 8.13.0.0 – ≤ 8.13.3.0, 8.10.0.0 – ≤ 8.10.0.23 —

Advisories 2

References