{"id":"CVE-2026-79857","published":"2026-10-22T19:17:57.963","lastModified":"2026-10-26T14:18:54.933","description":"There is a command injection vulnerability in the PAPI protocol (Aruba's access point management protocol) of AOS-8 that could lead to unauthenticated remote code execution by sending specially crafted packets to the affected UDP port. Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system.","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-77"],"vendors":[],"products":[],"references":[{"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05162en_us&docLocale=en_US","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A command injection flaw in ArubaOS-8's PAPI protocol allows unauthenticated remote code execution via specially crafted UDP packets, enabling attackers to run arbitrary privileged commands on the underlying OS.","exploitability":"Exploitation is straightforward for remote attackers due to the lack of authentication and low attack complexity, requiring only network access to the vulnerable UDP port.","blast_radius":"Successful exploitation grants full system compromise as a privileged user, enabling complete data theft, system modification, or service disruption across affected devices.","remediation":"Upgrade to AOS-8 version 8.10.100 or later, as patched by Aruba in the June 2026 security advisory (Aruba Security Advisory ASA-2026-0003).","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","papi","unauthenticated","command-injection","ics","network"],"model":"garnet-coder","analyzedAt":"2026-10-24T08:58:54.358Z"}}