CVE-2026-79955
ArubaOS (AOS): Unauthenticated Memory Corruption Vulnerability leads to Denial-of-Service in AOS-8
Hewlett Packard Enterprise (HPE) ArubaOS (AOS)
CVSS
7.5HighExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.42%Chance of exploitation activity in the next 30 days, higher than 35% of CVEs. Scored 24 Oct 2026FIRST EPSS
Fixed inNone listedNo source names a fixed version yet
What fixes it
No source in this snapshot names a fixed version.
Description
An unauthenticated memory corruption vulnerability exists in a service accessed via the PAPI protocol in AOS-8 that could allow an unauthenticated remote attacker to conduct a denial of service attack. Successful exploitation could allow an attacker to disrupt the availability of the affected service.
Text from CVE List
Affected versions 2
- ArubaOS (AOS)affected: 8.13.0.0 through 8.13.3.0CVE List
- ArubaOS (AOS)affected: 8.10.0.0 through 8.10.0.23CVE List