Skip to content
Sign in
9.6 Critical

CVE-2026-79863 Buffer overflow vulnerabilities in the affected interface of AOS-10 or AOS-8 could allow an unauthenticated adjacent…

Description

Buffer overflow vulnerabilities in the affected interface of AOS-10 or AOS-8 could allow an unauthenticated adjacent attacker to execute arbitrary code by sending specially crafted data to the affected interface. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system.

Affected products and versions

Product Affected versions Fixed in
Unknown product 10.8 10.8.0.0 → 10.8.1.1 No fix stated
Unknown product 10.6 10.6.0.0 → 10.7.2.6 No fix stated
Unknown product 10.3 10.3.0.0 → 10.4.1.13 No fix stated
Unknown product 8.12 8.12.0.0 → 8.13.3.0 No fix stated
Unknown product 8.10 8.10.0.0 → 8.10.0.23 No fix stated
ArubaOS (AOS) 10.8 10.8.0.0 → 10.8.1.1 No fix stated
ArubaOS (AOS) 10.7 10.7.0.0 → 10.7.2.6 No fix stated
ArubaOS (AOS) 10.4 10.4.0.0 → 10.4.1.13 No fix stated
ArubaOS (AOS) 8.13 8.13.0.0 → 8.13.3.0 No fix stated
Show the other branch
Product Affected versions Fixed in
ArubaOS (AOS) 8.10 8.10.0.0 → 8.10.0.23 No fix stated

Other CVEs of Unknown product

The 71 CVEs of Unknown product →
CVE-2026-95721 A memory corruption vulnerability exists in the web-based management interface of AOS-8 3.3 Low CVE-2026-95720 A buffer overflow vulnerability exists in AOS-8 that could allow an authenticated attacker with administrative access to… 4.4 Medium CVE-2026-95719 An arbitrary file deletion vulnerability exists in the command line interface of AOS-10 that could allow an… 4.9 Medium CVE-2026-95718 An authentication bypass vulnerability in the PAPI protocol of AOS-8 could allow an unauthenticated remote attacker to… 5.3 Medium
Track this CVE