Description
Vulnerabilities in the affected interface of AOS-10 could allow an unauthenticated remote attacker to conduct a denial of service attack. Successful exploitation could allow an attacker to disrupt the availability of the affected interface.
Published: 2026-10-22
Score: 7.5 High
EPSS: < 1% Very Low
KEV: No
Impact: Denial of Service
Action: Patch
AI Analysis

Impact

The vulnerability permits an unauthenticated remote attacker to deny service on the affected interface of AOS‑10. A successful exploit would disrupt the availability of that interface, potentially rendering the device or service inaccessible to legitimate users. The weakness aligns with denial‑of‑service flaws and indicates that unauthenticated users can cause a denial of service on the vulnerable interface.

Affected Systems

The issue affects Hewlett Packard Enterprise’s AOS‑10 platform. No specific product variant or firmware version information is provided, so all releases of AOS‑10 should be considered at risk until vendor guidance is received.

Risk and Exploitability

The CVSS score of 7.5 classifies this as a high‑severity vulnerability. The EPSS score of approximately 0.00324 indicates a very low but nonzero exploitation probability, suggesting that active exploitation is unlikely but possible. The inferred attack vector is remote and unauthenticated, implying that any host reachable from the network could be targeted without needing credentials. Assess the exposure surface and validate whether the vulnerable services are reachable.

Generated by OpenCVE AI on October 23, 2026 at 22:08 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Contact HPE support or consult the HPE documentation to determine the current patch or firmware update available for AOS‑10 and apply it as soon as possible.
  • If a patch is unavailable, restrict network access to the interfaces that expose the vulnerable service, for example by firewall rules or by moving the system to a secure subnet.
  • Deploy monitoring for repeated failed requests or abnormal traffic patterns that may indicate a DoS attack and isolate the system if a suspicious activity is detected.

Generated by OpenCVE AI on October 23, 2026 at 22:08 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Mon, 26 Oct 2026 19:30:00 +0000

Type Values Removed Values Added
First Time appeared Hpe
Hpe aos
Vendors & Products Hpe
Hpe aos

Fri, 23 Oct 2026 20:45:00 +0000

Type Values Removed Values Added
Weaknesses CWE-287
CWE-770

Fri, 23 Oct 2026 19:30:00 +0000

Type Values Removed Values Added
Description No description provided Vulnerabilities in the affected interface of AOS-10 could allow an unauthenticated remote attacker to conduct a denial of service attack. Successful exploitation could allow an attacker to disrupt the availability of the affected interface.

Fri, 23 Oct 2026 18:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-400
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Fri, 23 Oct 2026 04:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-287
CWE-770

Fri, 23 Oct 2026 00:45:00 +0000

Type Values Removed Values Added
Description No description provided
Title Unauthenticated Remote Denial-of-Service (DoS) Vulnerabilities in AOS-10
References
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}


cve-icon MITRE

Status: PUBLISHED

Assigner: hpe

Published:

Updated: 2026-10-23T19:13:57.176Z

Reserved: 2026-08-25T14:48:24.899Z

Link: CVE-2026-79895

cve-icon Vulnrichment

Updated: 2026-10-23T17:40:22.430Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-10-22T19:18:02.090

Modified: 2026-10-26T14:18:54.933

Link: CVE-2026-79895

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-26T19:10:49Z

Weaknesses
  • CWE-400

    Uncontrolled Resource Consumption