Skip to content
OpenAdvisories
High · 8.1 CVE-2026-79888 EUVD-2026-108388GHSA-x5mh-3qw6-pvx3

Unauthenticated Buffer Overflow allows Remote Code Execution in web interface

Published Oct 22, 2026 · Updated Oct 24, 2026 · Assigned by hpe

Description

A vulnerability in a certain web interface endpoint of AOS-8 devices could allow an unauthenticated remote attacker to trigger a buffer overflow. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system, leading to complete system compromise.

Affected products

VendorProductAffectedFixed
Hewlett Packard Enterprise (HPE) ArubaOS (AOS) 8.13.0.0 – ≤ 8.13.3.0, 8.10.0.0 – ≤ 8.10.0.23 —

Advisories 2

References