{"schema":"threatline.record/2","record":{"id":"CVE-2026-95720","aliases":[],"summary":"Authenticated Local Buffer Overflow Vulnerability leads to Denial-of-Service in AOS-8","details":"A buffer overflow vulnerability exists in AOS-8 that could allow an authenticated attacker with administrative access to cause denial of service. Successful exploitation could allow an attacker to crash the system, preventing it from rebooting without manual intervention and disrupting network operations.","categories":["Unclassified"],"product":"ArubaOS (AOS)","vendor":"Hewlett Packard Enterprise (HPE)","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-95720","source_modified_at":"2026-10-23T19:14:23.808Z","fetched_at":"2026-10-23T19:58:35.668311Z","product":"ArubaOS (AOS)","vendor":"Hewlett Packard Enterprise (HPE)","versions":[{"lessThanOrEqual":"8.13.3.0","status":"affected","version":"8.13.0.0","versionType":"semver"},{"lessThanOrEqual":"8.10.0.23","status":"affected","version":"8.10.0.0","versionType":"semver"}],"defaultStatus":"affected"}],"fixed_versions":[],"cvss":4.4,"severity":"Medium","kev":{"listed":false},"epss":{"probability":0.00108,"percentile":0.01123,"score_date":"2026-10-23"},"published_at":"2026-10-22T19:07:11.179Z","modified_at":"2026-10-23T19:14:23.808Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-95720","fetched_at":"2026-10-23T19:58:35.668311Z","source_modified_at":"2026-10-23T19:14:23.808Z"},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-95720","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23"}],"sources":["CVE List","EPSS"],"references":[{"source":"CVE List","url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05162en_us&docLocale=en_US"}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CVE List","ssvc":{"exploitation":"none","automatable":"no","technical_impact":"partial","assessed_at":"2026-10-23T15:18:14.898524Z"},"classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":null,"confidence":"unknown","reviewed":false},"change_timestamp":"2026-10-23T19:14:23.808Z","content_hash":"0b9fa3a2f51e1172f65b34a9eba5b5541729195f7818ea3fe6d96f6bdae1cd6f"}}