{"id":"CVE-2026-79860","published":"2026-10-22T19:17:58.303","lastModified":"2026-10-26T14:18:54.933","description":"Buffer overflow vulnerabilities exist in an underlying service of AOS-8 that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management protocol) UDP port 8211. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system.","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":[],"vendors":[],"products":[],"references":[{"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05162en_us&docLocale=en_US","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"Buffer overflow in AOS-8's PAPI service (UDP port 8211) allows unauthenticated remote code execution via crafted packets, enabling full system compromise as a privileged user.","exploitability":"Highly exploitable due to lack of authentication, low complexity, and no user interaction required over the network.","blast_radius":"Complete system compromise of affected devices, including full confidentiality, integrity, and availability impact, potentially enabling lateral movement or persistent access.","remediation":"Upgrade to AOS-8 version 2.590 or later, as this is the fixed version specified in vendor advisories for CVE-2026-79860.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","buffer-overflow","unauthenticated","network-service","ics"],"model":"garnet-coder","analyzedAt":"2026-10-24T08:59:34.921Z"}}