Description
No description provided
Published: 2026-10-22
Score: 7.5 High
EPSS: n/a
KEV: No
Impact: Denial of Service through unauthenticated memory corruption
Action: Assess Impact
AI Analysis

Impact

According to the official title, the vulnerability involves unauthenticated memory corruption that can cause a denial of service in Hewlett Packard Enterprise's AOS‑10 operating system. Because no detailed description is provided, this understanding is inferred from the title and the available CVSS score. The memory corruption could allow an attacker to craft malformed input that corrupts internal state, forcing the affected service to crash and denying legitimate users access.

Affected Systems

Hewlett Packard Enterprise's AOS‑10 operating system is affected. The vendor has not identified a specific product or version number, so the exact scope is unclear. Administrators should verify whether their devices run AOS‑10 and determine whether the vulnerable component is present. This lack of product detail means the attack may potentially impact a broad range of deployments.

Risk and Exploitability

The CVSS score of 7.5 indicates high severity. The EPSS score is not available, and the vulnerability is not listed in CISA KEV. Based on the information, the likely attack vector is remote and unauthenticated; the attacker can send crafted input from an untrusted network to trigger the memory corruption. This suggests a potential for exploitation over the network, making the risk significant, especially in environments where AOS‑10 provides critical network services.

Generated by OpenCVE AI on October 23, 2026 at 04:27 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Apply the latest HPE patch or update for AOS‑10 that addresses the memory corruption issue.
  • If a patch is not available, isolate the affected device from untrusted networks and limit service exposure to mitigate potential DoS attempts.
  • Configure intrusion detection or logging to monitor for abnormal service crashes and investigate any patterns that could indicate exploitation attempts.

Generated by OpenCVE AI on October 23, 2026 at 04:27 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Fri, 23 Oct 2026 04:45:00 +0000

Type Values Removed Values Added
Weaknesses CWE-122

Fri, 23 Oct 2026 00:45:00 +0000

Type Values Removed Values Added
Description No description provided
Title Unauthenticated Memory Corruption Vulnerabilities lead to Denial-of-Service in AOS-10
References
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}


Subscriptions

No data.

cve-icon MITRE

Status: PUBLISHED

Assigner: hpe

Published:

Updated: 2026-10-22T19:06:44.554Z

Reserved: 2026-08-25T14:48:24.899Z

Link: CVE-2026-79893

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-10-22T19:18:01.877

Modified: 2026-10-22T19:18:01.877

Link: CVE-2026-79893

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-23T04:30:04Z

Weaknesses
  • CWE-122

    Heap-based Buffer Overflow