中文

// CVE · PUBLISHED 2026-10-22

CVE-2026-79857

Hewlett Packard Enterprise (HPE) / ArubaOS (AOS)

9.8 · CVSS 3.1Critical

Description

There is a command injection vulnerability in the PAPI protocol (Aruba's access point management protocol) of AOS-8 that could lead to unauthenticated remote code execution by sending specially crafted packets to the affected UDP port. Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system.

References

Related CVEs

← CVE Index: search every CVE from the last 30 days

This product uses the NVD API but is not endorsed or certified by the NVD. CVSS scores do not establish exploitation.