Vulnerability details
CVE-2026-79876
Hewlett Packard Enterprise (HPE) ArubaOS
Unauthenticated Adjacent Sensitive Information Disclosure in AOS-10 Wi-Fi Frame Processing
CVSS 3.1
9.3Critical
Official description
A sensitive information disclosure vulnerability in the Wi-Fi frame processing of AOS-10 could allow an unauthenticated adjacent attacker to access sensitive information. Successful exploitation could allow an attacker to retrieve information which could be used to potentially gain further access to network services supported by AOS-10, or to interrupt the normal operation of the affected service.
CVSS scores
| Score | Version | Source | Vector |
|---|---|---|---|
| 9.3Critical | 3.1 | CVEProject cvelistV5 (CNA) (hpe) | CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:H |
Affected products
| Vendor | Product | Versions | Source |
|---|---|---|---|
| Hewlett Packard Enterprise (HPE) | ArubaOS (AOS) | 10.4.0.0 ≤ v ≤ 10.4.1.13 | CVEProject cvelistV5 (CNA) |
| Hewlett Packard Enterprise (HPE) | ArubaOS (AOS) | 10.7.0.0 ≤ v ≤ 10.7.2.6 | CVEProject cvelistV5 (CNA) |
| Hewlett Packard Enterprise (HPE) | ArubaOS (AOS) | 10.8.0.0 ≤ v ≤ 10.8.1.1 | CVEProject cvelistV5 (CNA) |
References and advisories
1
Kolun on Telegram @kolunsec
Exploited CVEs, key news and a daily digest
Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.
Details
- Published
- 2026-10-22
- Last updated
- 2026-10-30
- State
- Published
- Assigner (CNA)
- hpe
- Kolun priority
- 17 · Low
Exploit prediction (EPSS)
0.23%
Probability of exploitation in 30 days
14%
Percentile (among all CVEs)
SSVC assessment (CISA)
- Automatable
- No
- Exploitation
- None
- Technical impact
- Total
Weaknesses (CWE)
- CWE-200Exposure of Sensitive Information to an Unauthorized Actor