Description
No description provided
Published: 2026-10-22
Score: 8.1 High
EPSS: n/a
KEV: No
Impact: Remote Code Execution
Action: Apply Patch
AI Analysis

Impact

No detailed description was supplied. The reported flaws are multiple unauthenticated buffer overflow vulnerabilities within the AOS‑8 Web Interface that permit remote code execution.

Affected Systems

Hewlett Packard Enterprise's AOS‑8 Web Interface. The precise product name is not specified beyond the AOS‑8 Web Interface, and the vendor lists it as an unknown product.

Risk and Exploitability

The vulnerability receives a CVSS score of 8.1, indicating high severity. The EPSS score is not available, and it is not listed in the CISA KEV catalog. Because the flaws are unauthenticated and target a web interface, the likely attack vector is remote over the network; an attacker could craft malicious requests to trigger the buffer overflows and execute code with the privileges of the web service.

Generated by OpenCVE AI on October 23, 2026 at 04:03 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Apply the Hewlett Packard Enterprise patch or firmware update that addresses the buffer overflow vulnerabilities in the AOS‑8 Web Interface.
  • Restrict external network exposure of the AOS‑8 Web Interface by configuring firewalls or network segmentation to limit access to trusted hosts only.
  • Enable detailed logging on the web interface and monitor for anomalous traffic patterns or repeated malformed requests that could indicate exploitation attempts.

Generated by OpenCVE AI on October 23, 2026 at 04:03 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Fri, 23 Oct 2026 04:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-119

Fri, 23 Oct 2026 00:45:00 +0000

Type Values Removed Values Added
Description No description provided
Title Multiple Unauthenticated Buffer Overflow vulnerabilities in AOS-8 Web Interface result in Remote Code Execution
References
Metrics cvssV3_1

{'score': 8.1, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H'}

Subscriptions

No data.

cve-icon MITRE

Status: PUBLISHED

Assigner: hpe

Published:

Updated: 2026-10-22T19:06:17.875Z

Reserved: 2026-08-25T14:48:24.898Z

Link: CVE-2026-79889

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-10-22T19:18:01.457

Modified: 2026-10-22T19:18:01.457

Link: CVE-2026-79889

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-23T04:15:18Z

Weaknesses
  • CWE-119

    Improper Restriction of Operations within the Bounds of a Memory Buffer