Skip to content
OpenAdvisories
High · 8.2 CVE-2026-79884 EUVD-2026-108384GHSA-vv32-76mg-552q

Authentication Bypass leads to Sensitive Information Disclosure in AOS-8

Published Oct 22, 2026 · Updated Oct 30, 2026 · Assigned by hpe

Description

A vulnerability in the web-based management interface of AOS-8 could allow an unauthenticated adjacent attacker to bypass existing authentication controls and access sensitive information. Successful exploitation could allow an attacker to gain access to some data in a cleartext format possibly exposing other network infrastructure to further compromise.

Affected products

VendorProductAffectedFixed
Hewlett Packard Enterprise (HPE) ArubaOS (AOS) 8.13.0.0 – ≤ 8.13.3.0, 8.10.0.0 – ≤ 8.10.0.23 —

Advisories 2

References