{"affected":[{"defaultStatus":"affected","product":"ArubaOS (AOS)","source":"CNA: hpe","vendor":"Hewlett Packard Enterprise (HPE)","versions":[{"lessThanOrEqual":"10.8.1.1","status":"affected","version":"10.8.0.0","versionType":"semver"},{"lessThanOrEqual":"10.7.2.6","status":"affected","version":"10.7.0.0","versionType":"semver"},{"lessThanOrEqual":"10.4.1.13","status":"affected","version":"10.4.0.0","versionType":"semver"}]}],"cveId":"CVE-2026-79853","cwes":["CWE-200"],"description":"Sensitive information disclosure vulnerabilities in the affected interface of AOS-10 could allow an unauthenticated remote attacker to obtain sensitive information from the affected system. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.","epss":{"date":"2026-11-01","percentile":0.53081,"score":0.00697},"exploits":[],"kev":null,"metrics":[{"score":9.8,"severity":"critical","source":"CNA: hpe","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"}],"modifiedAt":1793621504804,"publishedAt":1792695900903,"references":[{"source":"CNA: hpe","tags":[],"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05162en_us&docLocale=en_US"}],"remediation":[],"revision":"c4e29ae08248e5ec09870ec05bdafe9d0a025bf092f07a81e7b85388d7338ab6","sources":[{"modifiedAt":1793621504804,"name":"CNA: hpe","retrievedAt":1793624949928,"url":"https://www.cve.org/CVERecord?id=CVE-2026-79853"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793624993418,"url":"https://api.first.org/data/v1/epss?cve=CVE-2026-79853"}],"ssvc":{"assessedAt":1793621456475,"automatable":"yes","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"total"},"status":"published","title":"Unauthenticated Sensitive Information Disclosure leads to Remote Code Execution in AOS-10","updatedAt":1793624993418}