{"id":"CVE-2026-79872","published":"2026-10-22T19:17:59.600","lastModified":"2026-10-26T14:18:54.933","description":"A buffer overflow vulnerability exists in the underlying operating system of AOS that could lead to unauthenticated remote code execution by an unauthenticated remote attacker. Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system.","cvssScore":9.4,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L","cwes":[],"vendors":[],"products":[],"references":[{"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05162en_us&docLocale=en_US","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A buffer overflow in AOS's underlying OS allows unauthenticated remote attackers to execute arbitrary code with privileged privileges due to insufficient bounds checking.","exploitability":"Exploitation is straightforward for a remote attacker since no authentication, user interaction, or special conditions are required.","blast_radius":"Successful exploitation grants full control of the underlying OS as a privileged user, enabling complete system compromise, data theft, and service disruption.","remediation":"No fixed version is published in the description; disable the affected AOS network-facing services until a patch is available.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","buffer-overflow","unauthenticated","privileged-execution"],"model":"garnet-coder","analyzedAt":"2026-10-25T08:47:42.643Z"}}