HPE Aruba Networking AOS-8 and AOS-10 Bulletin HPESBNW05162: CVE-2026-79844 and Seven More Flaws Rated 10.0, Patch Now
HPE has issued a critical security bulletin addressing 72 vulnerabilities in its Aruba Networking wireless operating systems, including several flaws with a maximum CVSS score of 10.0. Users are urged to patch their systems immediately to prevent potential remote code execution.
Why it matters
These vulnerabilities affect enterprise-grade Wi-Fi infrastructure, posing a significant security risk to organizations if left unpatched.
min read All posts HPE Aruba Networking AOS-8 and AOS-10 Bulletin HPESBNW05162: CVE-2026-79844 and Seven More Flaws Rated 10.0, Patch Now HPE published security bulletin HPESBNW05162 on 22 October 2026. It fixes 72 vulnerabilities in HPE Aruba Networking's wireless operating systems, AOS-8 and AOS-10, which run on Mobility Conductors, Mobility Controllers, Mobility Gateways and access points. HPE rates the bulletin Critical. The headline flaw, CVE-2026-79844, is an authentication bypass in AOS-10 that can lead to remote code execution. HPE scores it CVSS 3.1 10.0, the maximum, and says it could allow command execution "if certain preconditions outside of the attacker's control are met". HPE gives seven more CVEs the same 10.0 score: four in AOS-8, including CVE-2026-79846, which carries the same preconditions caveat, and three more in AOS-10. The fixed versions are AOS-10.8.1.2, 10.7.2.7 and 10.4.1.14, and AOS-8.13.3.1 and 8.10.0.24, or later.
Get smarter about the news
Sign up free for a feed built around what you actually care about, Dive Deeper research on any story, and the full text of every article.
Create free accountAlready have an account? Sign in