CVEvulnerability

CVE-2026-79887

8.1 HIGH Published 2026-10-22 Modified 2026-10-26 Official page ↗

Status: Awaiting Analysis
Published: 2026-10-22
Last modified: 2026-10-26
Assigner: [email protected]
CVSS 3.1 ([email protected]): 8.1 HIGH — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses: CWE-306, CWE-94

Description

A vulnerability in the web interface of AOS-8 could allow an unauthenticated remote attacker to achieve remote code execution. Successful exploitation could lead to complete device control, enabling interception of network traffic and potential compromise of connected systems.

Weakness · CWE (2)

CWE-306 Missing Authentication for Critical Functionality weakness
CWE-94 Improper Control of Generation of Code weakness

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05162en_us&docLocale=en_US support.hpe.com

CVE-2026-79887

Description

Related

Weakness · CWE (2)

References