{"id":"CVE-2026-79863","aliases":[],"cve":{"records":[{"id":"CVE-2026-79863","source":"hpe","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-08-25T14:47:36.509Z","published":"2026-10-22T19:05:20.425Z","modified":"2026-10-30T19:00:32.477Z"}],"publishers":[{"name":"hpe","role":"CNA","organizationId":"eb103674-0d28-4225-80f8-39fb86215de0","modified":"2026-10-23T19:13:06.343Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-10-30T19:00:32.477Z"}],"references":[{"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05162en_us&docLocale=en_US","tags":[],"source":"hpe"}],"weaknesses":[{"id":"CWE-120","description":"CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')","source":"CISA-ADP"}],"applicability":[],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-10-30T19:00:14.002680Z","decisions":[{"name":"Exploitation","value":"none"},{"name":"Automatable","value":"no"},{"name":"Technical Impact","value":"total"}]}]},"title":"Unauthenticated Adjacent Buffer Overflow Vulnerabilities lead to Remote Code Execution","titleSource":"hpe","descriptionSource":"hpe","description":"Buffer overflow vulnerabilities in the affected interface of AOS-10 or AOS-8 could allow an unauthenticated adjacent attacker to execute arbitrary code by sending specially crafted data to the affected interface. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system.","score":9.6,"severity":"critical","published":"2026-10-22T19:05:20.425Z","modified":"2026-10-30T19:00:32.477Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"Hewlett Packard Enterprise (HPE)","name":"ArubaOS (AOS)","platforms":[],"versions":[{"version":"10.8.0.0","status":"affected","lessThanOrEqual":"10.8.1.1","versionType":"semver"},{"version":"10.7.0.0","status":"affected","lessThanOrEqual":"10.7.2.6","versionType":"semver"},{"version":"10.4.0.0","status":"affected","lessThanOrEqual":"10.4.1.13","versionType":"semver"},{"version":"8.13.0.0","status":"affected","lessThanOrEqual":"8.13.3.0","versionType":"semver"},{"version":"8.10.0.0","status":"affected","lessThanOrEqual":"8.10.0.23","versionType":"semver"}],"defaultStatus":"affected","cpes":[],"source":"hpe","url":"https://www.cve.org/CVERecord?id=CVE-2026-79863"}],"remediation":[],"references":["https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05162en_us&docLocale=en_US"],"sources":[{"name":"CVE","id":"CVE-2026-79863","modified":"2026-10-30T19:00:32.477Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-79863"}],"assessments":[{"source":"hpe","vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","score":9.6}],"sourceAffected":[],"observedAt":"2026-10-30T20:21:31.051Z","kev":{"status":"not-listed","checkedAt":"2026-10-31T14:00:31.626Z"},"coverage":[{"source":"NVD","status":"not-checked"},{"source":"GHSA","status":"not-checked"},{"source":"EUVD","status":"not-checked"},{"source":"EPSS","status":"not-checked"}],"evidence":[],"aiSummary":{"text":"ArubaOS (AOS) versions 8.10.0.0 to 8.10.0.23, 8.13.0.0 to 8.13.3.0, 10.4.0.0 to 10.4.1.13, 10.7.0.0 to 10.7.2.6, and 10.8.0.0 to 10.8.1.1 have a buffer overflow vulnerability that could allow an unauthenticated attacker to execute arbitrary code. The vulnerability is in the affected interface. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-10-31T09:41:19.186Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-79863"}]}}