Zero Day MonitorZDM
DashboardVulnerabilitiesTrendingZero-DaysNewsAbout
Login
ImpressumPrivacy Policy
Zero Day Monitor © 2026
5087 articles · 249882 vulns · 37/41 feeds (7d)
← Back to list
10.0
CVE-2026-79847
arista · aos

Unauthenticated Buffer Overflow Vulnerabilities leads to Remote Code Execution in AOS-10

Description

Buffer overflow vulnerabilities in the affected interface of AOS-10 could lead to unauthenticated remote code execution by sending specially crafted packets to the affected interface. Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system.

Affected Products

VendorProductVersions
aristaaos10.8.0.0, 10.7.0.0, 10.4.0.0

Also Affects

Downstream vendors/products affected by this vulnerability

VendorProductSourceConfidence
arubaarubaoscert_advisory90%

References

  • https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05162en_us&docLocale=en_US

Related News (4 articles)

Tier D
BleepingComputer2d ago
HPE patches eight max severity RCE and auth bypass AOS flaws
→ No new info (linked only)
Tier B
BSI Advisories3d ago
[NEU] [hoch] Aruba ArubaOS: Mehrere Schwachstellen
→ No new info (linked only)
Tier B
CERT-FR3d ago
Multiples vulnérabilités dans les produits HPE Aruba Networking (23 octobre 2026)
→ No new info (linked only)
Tier C
VulDB3d ago
CVE-2026-79847 | HPE Unknown product up to 10.4.1.13/10.7.2.6/10.8.1.1 Remote Code Execution
→ No new info (linked only)

Discussion (0)

Loading…

CVSS 3.110.0 CRITICAL
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CISA KEV❌ No
Actively exploited❌ No
PublishedOct 22, 2026
Last enriched3d agov2
Trending Score45
Source articles4
Independent4
Info Completeness7/14
Missing: epss, cwe, kev, exploit, patch, iocs, mitre_attack

Community Vote

0
Login to vote
0 upvotes0 downvotes
No votes yet

Related CVEs (5)

CRITICALCVE-2026-93952EXPKEV
Security Advisory 0183
Trending: 104
CRITICALCVE-2026-114625EXP
Security Advisory 0199
Trending: 94
CRITICALCVE-2026-79848
Unauthenticated SQL Injection Vulnerabilities allow Remote Code Execution in AOS-8
Trending: 45
CRITICALCVE-2026-79855
Authentication Bypass in the SSH Daemon of AOS-8 leads to Complete System Compromise
Trending: 42
CRITICALCVE-2026-79856
Unauthenticated Buffer Overflow Vulnerability leads to Authentication Bypass in AOS-8
Trending: 42

Pin to Dashboard

Verification

State: unverified
Confidence: 0%

Vulnerability Timeline

CVE Published
Oct 22, 2026
Discovered by ZDM
Oct 22, 2026
Updated: affectedVersions, description
Oct 22, 2026

Version History

v2
Last enriched 3d ago
v2Tier C3d ago

Updated affected versions to include 10.4.1.13, 10.7.2.6, and 10.8.1.1, and added technical description clarifying the vulnerability is remotely exploitable.

affectedVersionsdescription
via VulDB
v13d ago

Initial creation