AI and data stack advisories

Severe, 6 weeks977Projects326

977 severe, 6 weeks · 326 projects

Hewlett Packard Enterprise ArubaOS (AOS): information disclosure

Hewlett Packard Enterprise

CVE-2026-79884 · Published Oct 22, 2026 · updated Oct 30, 2026

High8.2
No fix yet

A vulnerability in the web-based management interface of AOS-8 could allow an unauthenticated adjacent attacker to bypass existing authentication controls and access sensitive information. Successful exploitation could allow an attacker to gain access to some data in a cleartext format possibly exposing other network infrastructure to further compromise.

Affected versions

PackageAffectedFixed in
ArubaOS (AOS)
Product
>= 8.13.0.0, <= 8.13.3.0No fix yet
>= 8.10.0.0, <= 8.10.0.23No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-287

More Hewlett Packard Enterprise advisories

All Hewlett Packard Enterprise