Skip to content
OpenAdvisories
High · 8.2 CVE-2026-79885 EUVD-2026-108385GHSA-v497-5qvg-gwqj

Unauthenticated File Write Vulnerability leads to Denial-of-Service in AOS-8

Published Oct 22, 2026 · Updated Nov 2, 2026 · Assigned by hpe

Description

An unauthenticated file write vulnerability exists in the PAPI protocol in AOS-8. Successful exploitation could allow an unauthenticated remote attacker to make limited modifications to files on the affected system and to disrupt the availability of the affected service.

Affected products

VendorProductAffectedFixed
Hewlett Packard Enterprise (HPE) ArubaOS (AOS) 8.13.0.0 – ≤ 8.13.3.0, 8.10.0.0 – ≤ 8.10.0.23 —

Advisories 2

References