CVE-2026-79892
ArubaOS (AOS): Authenticated Local Memory Corruption Vulnerability leads to Arbitrary Code Execution in AOS-8
Hewlett Packard Enterprise (HPE) ArubaOS (AOS)
CVSS
7.8HighExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.12%Chance of exploitation activity in the next 30 days, higher than 1% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed inNone listedNo source names a fixed version yet
What fixes it
No source in this snapshot names a fixed version.
Description
A memory corruption vulnerability exists in AOS-8 that could allow an authenticated local attacker to execute arbitrary code. Successful exploitation could allow the attacker to execute arbitrary code as a privileged user on the underlying operating system.
Text from CVE List
Affected versions 2
- ArubaOS (AOS)affected: 8.13.0.0 through 8.13.3.0CVE List
- ArubaOS (AOS)affected: 8.10.0.0 through 8.10.0.23CVE List