{"affected":[{"defaultStatus":"affected","product":"ArubaOS (AOS)","source":"CNA: hpe","vendor":"Hewlett Packard Enterprise (HPE)","versions":[{"lessThanOrEqual":"10.8.1.1","status":"affected","version":"10.8.0.0","versionType":"semver"},{"lessThanOrEqual":"10.7.2.6","status":"affected","version":"10.7.0.0","versionType":"semver"},{"lessThanOrEqual":"10.4.1.13","status":"affected","version":"10.4.0.0","versionType":"semver"}]}],"cveId":"CVE-2026-79869","cwes":["CWE-287"],"description":"Authentication bypass vulnerabilities in the affected interface of AOS-10 could allow an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to execute arbitrary commands as a privileged user on the underlying operating system.","epss":{"date":"2026-11-01","percentile":0.22013,"score":0.00294},"exploits":[],"kev":null,"metrics":[{"score":9.6,"severity":"critical","source":"CNA: hpe","vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","version":"3.1"}],"modifiedAt":1793621579374,"publishedAt":1792695930299,"references":[{"source":"CNA: hpe","tags":[],"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05162en_us&docLocale=en_US"}],"remediation":[],"revision":"7a08c2bb0924ad25bff8c9dea3a35bf87f8a571c50d457c530961806cd3a9bca","sources":[{"modifiedAt":1793621579374,"name":"CNA: hpe","retrievedAt":1793624951262,"url":"https://www.cve.org/CVERecord?id=CVE-2026-79869"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793624992831,"url":"https://api.first.org/data/v1/epss?cve=CVE-2026-79869"}],"ssvc":{"assessedAt":1793621526347,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"total"},"status":"published","title":"Authentication Bypass Leading to Remote Code Execution in AOS-10","updatedAt":1793624992831}