CVE-2026-79860
9.8 CRITICALPublished 2026-10-22 · Updated 2026-10-26
AI risk analysis
- Summary
- Buffer overflow in AOS-8's PAPI service (UDP port 8211) allows unauthenticated remote code execution via crafted packets, enabling full system compromise as a privileged user.
- Exploitability
- Highly exploitable due to lack of authentication, low complexity, and no user interaction required over the network.
- Blast radius
- Complete system compromise of affected devices, including full confidentiality, integrity, and availability impact, potentially enabling lateral movement or persistent access.
- Detection
- No reliable host or network indicator is derivable from the published description.
- Prioritized remediation
- Upgrade to AOS-8 version 2.590 or later, as this is the fixed version specified in vendor advisories for CVE-2026-79860.
Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.
NVD description
Buffer overflow vulnerabilities exist in an underlying service of AOS-8 that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management protocol) UDP port 8211. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- CRITICALCVE-2026-49435
- HIGHCVE-2026-71265PoC
- CRITICALCVE-2026-76723
- CRITICALCVE-2026-76744
- CRITICALCVE-2026-79847
- CRITICALCVE-2026-79851
- CRITICALCVE-2026-79857
- CRITICALCVE-2026-79859
Related by shared AI tags and CWE weakness class. Browse the full archive.