CVE-2026-95710 Unauthenticated Adjacent Buffer Overflow Vulnerability leads to Denial-of-Service in AOS-10 or AOS-8

High 7.1 Published Updated
Exploited in the wild
Not known
Fix
None listed

What is CVE-2026-95710?

CVE-2026-95710 is a high-severity vulnerability in Hewlett Packard Enterprise (HPE) ArubaOS (AOS), published on 22 Oct 2026.

Official description

An unauthenticated buffer overflow vulnerability exists in the underlying operating system of AOS-10 or AOS-8 and could allow an unauthenticated adjacent attacker to conduct a denial of service attack. Successful exploitation could allow an attacker to disrupt the availability of the affected system, with a limited impact to the integrity of the affected component.

Weakness: CWE-119

Which versions are affected by CVE-2026-95710?

How do I fix CVE-2026-95710?

No fix has been published for CVE-2026-95710 yet. Limit exposure of the affected software until one is available.

Is CVE-2026-95710 being exploited?

There is no known exploitation of CVE-2026-95710 in the wild and no public exploit code.

Sources

Also known as GHSA-cmrg-c64v-p7h4.

Is CVE-2026-95710 in your software?

Upload an SBOM and sbomify checks it against every vulnerability here, every day.

Check your SBOMs for free