{"id":"CVE-2026-79863","published":"2026-10-22T19:17:58.630","lastModified":"2026-10-26T14:18:54.933","description":"Buffer overflow vulnerabilities in the affected interface of AOS-10 or AOS-8 could allow an unauthenticated adjacent attacker to execute arbitrary code by sending specially crafted data to the affected interface. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system.","cvssScore":9.6,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","cwes":[],"vendors":[],"products":[],"references":[{"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05162en_us&docLocale=en_US","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A buffer overflow in the affected interface of AOS-10 or AOS-8 allows unauthenticated adjacent attackers to execute arbitrary code by sending specially crafted data, potentially leading to full system compromise as a privileged user.","exploitability":"Exploitation requires an unauthenticated adjacent attacker (e.g., same wired/wireless LAN segment) with no user interaction and low technical barriers due to lack of authentication or access controls on the vulnerable interface.","blast_radius":"Successful exploitation grants arbitrary code execution as a privileged user on the underlying OS, enabling full system takeover, lateral movement within the local network, and potential disruption of critical infrastructure services.","remediation":"Upgrade to AOS-8.590 or later or AOS-10.210 or later (exact fixed versions inferred from typical Aruba OS release numbering; if vendor advisory specifies different, follow that precisely). If no fixed version is published, disable the affected interface and restrict adjacent network access via segmentation or firewall rules.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","buffer-overflow","adjacent-network","no-auth"],"model":"garnet-coder","analyzedAt":"2026-10-25T08:46:25.029Z"}}