CVE-2026-79858

Hewlett Packard Enterprise (HPE) ArubaOS (AOS)

Medium priority: severe, but no known exploitation

An unauthenticated SQL injection vulnerability exists in the PAPI protocol in AOS-8. Successful exploitation could allow an unauthenticated remote attacker to obtain and modify sensitive information in the underlying database and to interrupt the normal operation of the affected service.

In the news

• Múltiples vulnerabilidades en productos de HPE · INCIBE-CERT