CVE-2026-79880 Authenticated Server-Side Request Forgery leads to Remote Code Execution in AOS-8

A vulnerability in the command line interface of AOS-8 could allow an authenticated remote attacker with high privileges to conduct a server-side request forgery SSRF attack. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system...

CVE-2026-79879 Unauthenticated Adjacent Memory Corruption Vulnerabilities lead to Remote Code Execution in AOS-10

Memory corruption vulnerabilities in the affected interface of AOS-10 could lead to remote code execution by an unauthenticated adjacent attacker. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system...

CVE-2026-79879

CVE-2026-79879 identifies unauthenticated adjacent memory corruption vulnerabilities in AOS-10 . These flaws can lead to Remote Code Execution (RCE). The vulnerability is accessible via an adjacent attack vector with a CVSS v3.1 base score of 8.8 (HIGH) , potentially impacting confidentiality, in...

CVE-2026-79878

A vulnerability exists in the AOS-8 Command Line Interface when accessed by the PAPI Protocol . This unauthenticated adjacent command injection flaw allows an attacker to execute arbitrary commands. The impact is rated as High severity (CVSS 8.8) with significant effects on confidentiality, integ...

CVE-2026-79878 Unauthenticated Adjacent Command Injection Vulnerability in the AOS-8 Command Line Interface Accessed by the PAPI Protocol

A command injection vulnerability in the AOS-8 command line interface accessed by the PAPI protocol could lead to unauthenticated remote code execution by an adjacent attacker sending specially crafted PAPI packets destined to the PAPI UDP port 8211. Successful exploitation could allow an attacke...

CVE-2026-79877

Technical details for CVE-2026-79877 are not publicly available in the provided documents. Monitor for further updates regarding this entry.

CVE-2026-79877 Unauthenticated Adjacent Remote Code Execution Vulnerability in AOS-10

A remote code execution vulnerability in the underlying operating system of AOS-10 could allow an unauthenticated adjacent attacker to execute arbitrary code on an affected device. Successful exploitation could allow an attacker to execute arbitrary commands as a privileged user on the underlying...

CVE-2026-79872 Unauthenticated Buffer Overflow Vulnerability allows Remote Code Execution in AOS-10 and AOS-8

A buffer overflow vulnerability exists in the underlying operating system of AOS that could lead to unauthenticated remote code execution by an unauthenticated remote attacker. Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on t...

CVE-2026-79872

Technical details for CVE-2026-79872 are not publicly available in the provided documents. Action: monitor for updates.

CVE-2026-79869 Authentication Bypass Leading to Remote Code Execution in AOS-10

Authentication bypass vulnerabilities in the affected interface of AOS-10 could allow an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to execute arbitrary commands as a privileged user on the underlying operating...

CVE-2026-79867 Authentication Bypass Leading to Remote Code Execution in AOS-8

Authentication bypass vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated adjacent attacker to circumvent existing authentication controls and run arbitrary commands on the underlying host. Successful exploitation could allow an attacker to execute arbitrary commands...

CVE-2026-79865

CVE-2026-79865 identifies an unauthenticated adjacent memory corruption vulnerability in AOS-10 that can lead to Remote Code Execution . While specific technical root causes are not detailed, the vulnerability allows for remote exploitation. No specific exploit links or remediation details are pr...

CVE-2026-79865 Unauthenticated Adjacent Memory Corruption Vulnerability leads to Remote Code Execution in AOS-10

A memory corruption vulnerability in the affected interface of AOS-10 could allow an unauthenticated adjacent attacker to achieve remote code execution. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system...

CVE-2026-79863 Unauthenticated Adjacent Buffer Overflow Vulnerabilities lead to Remote Code Execution

Buffer overflow vulnerabilities in the affected interface of AOS-10 or AOS-8 could allow an unauthenticated adjacent attacker to execute arbitrary code by sending specially crafted data to the affected interface. Successful exploitation could allow an attacker to execute arbitrary code as a...

CVE-2026-79862 Unauthenticated Adjacent Buffer Overflow Vulnerabilities lead to Remote Code Execution

Buffer overflow vulnerabilities in the affected interface of AOS-10 or AOS-8 could allow an unauthenticated adjacent attacker to execute arbitrary code by sending specially crafted data to the affected interface. Successful exploitation could allow an attacker to execute arbitrary code as a...

CVE-2026-79861

CVE-2026-79861 identifies an unauthenticated command injection vulnerability within the PAPI Protocol of AOS-10 . Although the provided documents do not include specific technical details regarding the root cause, affected versions, or remediation steps, the vulnerability is classified as CRITICA...

CVE-2026-79861 Unauthenticated Command Injection Vulnerability in the PAPI Protocol of AOS-10

There is a command injection vulnerability in AOS-10 that could lead to unauthenticated remote code execution by sending specially crafted PAPI packets. Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating...

CVE-2026-79860

Technical details for CVE-2026-79860 are not publicly available in the provided documents. While the title mentions unauthenticated buffer overflow vulnerabilities leading to remote code execution in AOS-8 , no specific root cause, affected versions, or remediation steps are provided. Monitor for...

CVE-2026-79860 Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-8

Buffer overflow vulnerabilities exist in an underlying service of AOS-8 that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI Aruba's access point management protocol UDP port 8211. Successful exploitation could allow an attacker to...

CVE-2026-79859 Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-8

Buffer overflow vulnerabilities exist in the affected interface of AOS-8 that could lead to unauthenticated remote code execution. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system...