Description
No description provided
Published: 2026-10-22
Score: 7.5 High
EPSS: n/a
KEV: No
Impact: Denial of Service
Action: Apply Patch
AI Analysis

Impact

The vulnerability, as indicated by its name, allows an attacker who is not authenticated to cause a denial of service by abusing the PAPI protocol of Hewlett Packard Enterprise AOS‑8. Because no official description is supplied, the precise mechanism, affected input parameters, or scope of the impact cannot be detailed beyond the fact that service disruption is possible.

Affected Systems

The affected product is Hewlett Packard Enterprise AOS‑8. No specific version range is documented, so it is assumed that all releases including the PAPI protocol implementation are potentially vulnerable.

Risk and Exploitability

The CVSS score of 7.5 classifies this as a high severity issue. The EPSS score is not available, and the vulnerability is not listed in CISA’s KEV catalog. From the title alone it is inferred that the likely attack vector is remote network access to the PAPI interface and that no authentication is required to trigger the denial of service. Exploitation would involve repeatedly sending requests to the service, though no further technical details are provided.

Generated by OpenCVE AI on October 23, 2026 at 04:26 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Apply the latest firmware update or patch released by HPE for AOS‑8 that addresses the PAPI protocol issue.
  • Restrict external access to the PAPI interface by configuring firewall rules or network segmentation to limit traffic to trusted sources.
  • Monitor system logs and performance metrics for signs of repeated request bursts and unusually high CPU or memory usage as indicators of attempted DoS attacks.

Generated by OpenCVE AI on October 23, 2026 at 04:26 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Fri, 23 Oct 2026 04:45:00 +0000

Type Values Removed Values Added
Weaknesses CWE-400

Fri, 23 Oct 2026 00:45:00 +0000

Type Values Removed Values Added
Description No description provided
Title Unauthenticated Denial-of-Service (DoS) Vulnerability in the PAPI Protocol of AOS-8
References
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}


Subscriptions

No data.

cve-icon MITRE

Status: PUBLISHED

Assigner: hpe

Published:

Updated: 2026-10-22T19:06:45.891Z

Reserved: 2026-08-25T14:48:24.899Z

Link: CVE-2026-79894

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-10-22T19:18:01.983

Modified: 2026-10-22T19:18:01.983

Link: CVE-2026-79894

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-23T04:30:04Z

Weaknesses
  • CWE-400

    Uncontrolled Resource Consumption