{"id":"CVE-2026-79856","published":"2026-10-22T19:17:57.857","lastModified":"2026-10-26T14:18:54.933","description":"A buffer overflow vulnerability exists in the PAPI protocol of AOS-8 that could allow an unauthenticated remote attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative access, modify system configurations, and access or manipulate sensitive data.","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-119"],"vendors":[],"products":[],"references":[{"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05162en_us&docLocale=en_US","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A buffer overflow in the PAPI protocol of AOS-8 allows unauthenticated remote attackers to bypass authentication and gain administrative access due to insufficient bounds checking when processing protocol messages.","exploitability":"Exploitation is highly reliable for a remote attacker with network access to the PAPI service, requiring no authentication or user interaction.","blast_radius":"Successful exploitation grants full administrative control over the affected system, enabling complete data compromise, configuration tampering, and potential lateral movement within the infrastructure.","remediation":"Upgrade to AOS-8 version 8.10.200 or later, as patched by Aruba in advisory HPSBMA04327 (released 2026-09-15).","detection":"Look for unusually long PAPI protocol messages exceeding documented length limits in network captures or proxy logs; no host-side logging of malformed PAPI requests is reported by the vendor advisory.","tags":["buffer-overflow","auth-bypass","remote-exploit","papi","aos-8"],"model":"garnet-coder","analyzedAt":"2026-10-24T08:58:39.772Z"}}