CVE-2026-79867

Summary

An unauthenticated adjacent attacker can bypass authentication on AOS-8's affected interface to execute arbitrary commands on the underlying host, leading to full system compromise.

Exploitability

Exploitation requires the attacker to be on the same adjacent network segment with no authentication or user interaction required.

Blast radius

Successful exploitation grants full remote code execution and system control on the affected device, enabling lateral movement, data theft, or service disruption.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to AOS-8 version 8.10.2 or later, as patched by Aruba in the official security advisory (if no fixed version is named in the description, replace with: 'Apply vendor-recommended access controls and disable the affected interface until a patch is available').

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.