CVE-2026-79872 — Vulnerability intelligence

Hewlett Packard Enterprise (HPE) — ArubaOS (AOS)

Published: 2026-10-22T19:05:35.350Z

CVSS

9.4

CISA KEV

Not listed; not proof of no exploitation

Original source text (not a translation)

A buffer overflow vulnerability exists in the underlying operating system of AOS that could lead to unauthenticated remote code execution by an unauthenticated remote attacker. Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system.

Sources

• CVE-2026-79872
• Original advisory
• CVE-2026-79872