CVE-2026-79858 — Unauthenticated SQL Injection Vulnerability in the PAPI Protocol of AOS-8

CVE-2026-79858

Unauthenticated SQL Injection Vulnerability in the PAPI Protocol of AOS-8 PUBLISHED

Description (CNA)

An unauthenticated SQL injection vulnerability exists in the PAPI protocol in AOS-8. Successful exploitation could allow an unauthenticated remote attacker to obtain and modify sensitive information in the underlying database and to interrupt the normal operation of the affected service.

Affected (CNA)

Vendor / product	Versions
Hewlett Packard Enterprise (HPE) / ArubaOS (AOS)	affected 8.13.0.0 through 8.13.3.0; affected 8.10.0.0 through 8.10.0.23

CWE

No CWE identifiers supplied.

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05162en_us&docLocale=en_US

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.