{"metadata": {"vulnerability": "CVE-2026-79844", "count": 25, "kinds": {"milestone": 7, "sighting": 5, "kev": 0, "other": 13}}, "data": [{"timestamp": "2025-08-04T16:30:00Z", "date_only": false, "value": "2025-08-04T16:30:00Z", "kind": "other", "label": "Document generated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0454", "record": "NCSC-2026-0454", "field": "document.tracking.generator.date"}, {"timestamp": "2026-08-25T14:47:15.582Z", "date_only": false, "value": "2026-08-25T14:47:15.582Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-79844", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-22T00:00:00Z", "date_only": true, "value": "2026-10-22", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1369", "record": "CERTFR-2026-AVI-1369", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-10-22T00:00:00Z", "date_only": false, "value": "2026-10-22T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-79844", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-22T00:00:00Z", "date_only": false, "value": "2026-10-22T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-79844", "record": "FKIE_CVE-2026-79844", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-22T19:04:44.829Z", "date_only": false, "value": "2026-10-22T19:04:44.829Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-79844", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-22T19:17:56Z", "date_only": false, "value": "2026-10-22T19:17:56Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-5C4J-GP89-FJ43", "record": "GHSA-5C4J-GP89-FJ43", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-22T19:17:56.367Z", "date_only": false, "value": "2026-10-22T19:17:56.367", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-79844", "record": "FKIE_CVE-2026-79844", "field": "published"}, {"timestamp": "2026-10-22T19:59:07.492Z", "date_only": false, "value": "2026-10-22T19:59:07.492986Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117486331294607309", "record": "CVE-2026-79844", "field": "creation_timestamp", "uuid": "c4128473-3131-43f6-aa5a-f3b45929d566", "content": "CVE-2026-79844 Authentication Bypass Leading to Remote Code Execution in AOS-10 No description provided\nhttps://www.cve.org/CVERecord?id=CVE-2026-79844https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05162en_us&docLocale=en_US#HewlettPackardEnterprise(HPE) #Unknownproduct#CVE_2026_79844#bot", "url": "https://infosec.exchange/users/cve/statuses/117486331294607309"}, {"timestamp": "2026-10-22T21:32:46Z", "date_only": false, "value": "2026-10-22T21:32:46Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-5C4J-GP89-FJ43", "record": "GHSA-5C4J-GP89-FJ43", "field": "published"}, {"timestamp": "2026-10-22T21:32:46Z", "date_only": false, "value": "2026-10-22T21:32:46Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-5C4J-GP89-FJ43", "record": "GHSA-5C4J-GP89-FJ43", "field": "modified"}, {"timestamp": "2026-10-23T00:00:00Z", "date_only": false, "value": "2026-10-23T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1369", "record": "CERTFR-2026-AVI-1369", "field": "last_revision_date"}, {"timestamp": "2026-10-23T00:00:00Z", "date_only": false, "value": "2026-10-23T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1369", "record": "CERTFR-2026-AVI-1369", "field": "initial_release_date"}, {"timestamp": "2026-10-23T00:00:00Z", "date_only": false, "value": "2026-10-23T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1369", "record": "CERTFR-2026-AVI-1369", "field": "revisions.0.revision_date"}, {"timestamp": "2026-10-23T03:55:39.135Z", "date_only": false, "value": "2026-10-23T03:55:39.135Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-79844", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-23T19:12:30.616Z", "date_only": false, "value": "2026-10-23T19:12:30.616Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-79844", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-23T19:12:30.616Z", "date_only": false, "value": "2026-10-23T19:12:30.616Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / hpe", "record": "CVE-2026-79844", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-24T21:00:08.857Z", "date_only": false, "value": "2026-10-24T21:00:08.857548Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/elcompilado.com/post/3mynlktlm572d", "record": "CVE-2026-79844", "field": "creation_timestamp", "uuid": "5d229328-54fa-4dbe-b06d-98f2ef813262", "content": "HPE parchea 72 fallas en AOS-8 y AOS-10, y ocho de ellas son CVSS 10.0 con RCE sin autenticar o bypass de autenticaci\u00f3n\n\nEl bolet\u00edn HPESBNW05162 cubre los controladores Wi-Fi de Aruba, con CVE-2026-79844 a la cabeza.", "url": "https://bsky.app/profile/elcompilado.com/post/3mynlktlm572d"}, {"timestamp": "2026-10-25T20:00:00Z", "date_only": false, "value": "2026-10-25T20:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.hkcert.org/security-bulletin/aruba-products-multiple-vulnerabilities_20261026", "record": "CVE-2026-79844", "field": "creation_timestamp", "uuid": "0dbf726c-0885-4fce-b6e1-6c02dbb38584", "url": "https://www.hkcert.org/security-bulletin/aruba-products-multiple-vulnerabilities_20261026"}, {"timestamp": "2026-10-26T06:43:17Z", "date_only": false, "value": "2026-10-26T06:43:17.000000Z", "kind": "sighting", "label": "Seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0454", "record": "CVE-2026-79844", "field": "creation_timestamp", "uuid": "f19a86b6-28d3-4b0e-9ec4-4cf7d9ab2212", "url": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0454"}, {"timestamp": "2026-10-26T12:43:17Z", "date_only": false, "value": "2026-10-26T12:43:17.000000Z", "kind": "sighting", "label": "Seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0454", "record": "CVE-2026-79844", "field": "creation_timestamp", "uuid": "147a95d6-790a-4249-84c5-1037a3641cf0", "content": "HPE heeft 72 kwetsbaarheden verholpen in HPE Networking AOS-8 en AOS-10, waaronder Mobility Conductors, Mobility Controllers, Mobility Gateways en Access Points. De kwetsbaarheden betreffen verschillende beveiligingsproblemen, waaronder authenticatieomzeiling, command- en SQL-injectie, buffer-overflows en onvoldoende toegangscontrole. Van de in totaal 72 kwetsbaarheden zijn 33 als kritiek aangemerkt. Hiervan kunnen 19 volgens HPE Networking zonder authenticatie op afstand via het netwerk worden misbruikt. Voor de overige 14 kritieke kwetsbaarheden is volgens HPE Networking eveneens geen authenticatie vereist, maar moet de aanvaller toegang hebben tot een aangrenzend netwerk. Succesvol misbruik kan onder meer leiden tot het uitvoeren van willekeurige code, het verkrijgen van administratieve toegang, het wijzigen van configuraties, het uitlezen van gevoelige informatie en Denial-of-Service.\n\nVan de 33 kritieke kwetsbaarheden hebben acht een CVSS-score van 10.0. De kwetsbaarheden met kenmerk CVE-2026-79844, CVE-2026-79845, CVE-2026-79846, CVE-2026-79847, CVE-2026-79848, CVE-2026-79849, CVE-2026-79850 en CVE-2026-79851 kunnen zonder authenticatie en gebruikersinteractie op afstand worden misbruikt. Zeven hiervan kunnen leiden tot het uitvoeren van willekeurige code. CVE-2026-79845 kan leiden tot het verkrijgen van administratieve toegang en het wijzigen of uitlezen van gevoelige gegevens. Voor sommige kwetsbaarheden gelden aanvullende voorwaarden. Hoewel CVE-2026-79844 en CVE-2026-79846 een CVSS-score van 10.0 hebben, vermeldt HPE dat misbruik afhankelijk kan zijn van voorwaarden buiten de controle van de aanvaller.\n\nDe kwetsbaarheden met kenmerk CVE-2026-79857 en CVE-2026-79860 in het PAPI-protocol van AOS-8, kunnen zonder authenticatie op afstand worden misbruikt door speciaal vervaardigde UDP-pakketten te versturen. Succesvol misbruik kan leiden tot het uitvoeren van willekeurige code met verhoogde rechten en mogelijk volledige compromittering van het systeem. \n\nHPE Networking meldt niet op de hoogte te zijn van publieke exploitcode en zijn geen bevestigde gevallen van actief misbruik bekend. Het NCSC adviseert om de beveiligingsupdates voor de kritieke kwetsbaarheden met voorrang toe te passen.", "url": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0454"}, {"timestamp": "2026-10-26T13:43:17.490Z", "date_only": false, "value": "2026-10-26T13:43:17.490494Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2026-0454", "record": "NCSC-2026-0454", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-26T13:43:17.490Z", "date_only": false, "value": "2026-10-26T13:43:17.490494Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2026-0454", "record": "NCSC-2026-0454", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-26T13:43:17.490Z", "date_only": false, "value": "2026-10-26T13:43:17.490494Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0454", "record": "NCSC-2026-0454", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T14:18:54.933Z", "date_only": false, "value": "2026-10-26T14:18:54.933", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-79844", "record": "FKIE_CVE-2026-79844", "field": "lastModified"}]}