Patchfirst
Patchfirst
CVE-2026-79871 Critical · 9.6 EPSS 0.3%

A sensitive information disclosure vulnerability in the command line interface of AOS-10 could allow an…

Hewlett Packard Enterprise (HPE) · ArubaOS (AOS)

Summary

A sensitive information disclosure flaw in the command line interface of ArubaOS (AOS-10), a product from Hewlett Packard Enterprise (HPE), exposes data that the CLI should protect. An unauthenticated attacker with adjacent network access can exploit it without user interaction, retrieving information that could be used to gain further access to network services supported by AOS-10.

Official description · NVD

A sensitive information disclosure vulnerability in the command line interface of AOS-10 could allow an unauthenticated remote attacker to access sensitive information. Successful exploitation could allow an attacker to retrieve information which could be used to potentially gain further access to network services supported by AOS-10.

Breakdown
13.5 / 100
Exploited
Not confirmed
Reports
0
Tactics
0/15

Disclosed on 22 Oct 2026. No public exploit code or confirmed exploitation is recorded.

techniques

No techniques linked

No ATT&CK techniques are linked to this CVE yet. MITRE CTID has not mapped it, and no report passage in the corpus ties it to a technique.

What security researchers reported

Not named in any threat report yet

Also mentioned in 6 community threat pulses (AlienVault OTX)

Weaker evidence

Pulses are indicator collections that anyone can publish. A mention is not confirmation of exploitation.

References

1 link, grouped by NVD tag

Other 1

support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05162en_us&docLocale=en_US
↑ ↓ chooseEnter openEsc close