SShortSingh.
Back to feed

HPE warns of critical ArubaOS AOS-8 flaw CVE-2026-79860 enabling remote code execution

0
·2 views

HPE Networking published advisory HPESBNW05162 on 22 October 2026 describing CVE-2026-79860, a buffer overflow in specific ArubaOS AOS-8 releases. The flaw can be triggered by crafted PAPI packets sent to UDP port 8211 without authentication, and HPE rates it 9.8 on the CVSS 3.1 scale. Successful exploitation can run arbitrary code with privileged access on the underlying system. Affected releases include AOS-8.13.0.0 through 8.13.3.0 and AOS-8.10.0.0 through 8.10.0.23, with fixes in 8.13.3.1 and 8.10.0.24 or later. The public record does not establish any active exploitation campaign, and HPE recommends restricting management interfaces and verifying patch deployment.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Log in to join the discussion and vote.

Log in

Related stories

0
ProgrammingDEV Community ·

Skip link on 22 app routes moves focus to the panel but leaves the URL unchanged

A keyboard-focus test of 22 app pages on the OnePassApps site checked the Skip to content link, which targets a main element with id main on every route. Pressing it with Enter moved focus to that main element on all routes, but the URL fragment stayed empty and the page did not scroll. The link is never the first Tab stop, since at least three shell controls come before it, and after it the shell's own controls still precede the app's first field. The first app control arrives as the 10th or 11th stop on most routes, and the author declined to give counts for two routes where the fields' accessible names came from wrapping labels.

0
ProgrammingDEV Community ·

Study finds 34% of post-rule state court decisions on AI fabrications cite the new citation-check rules

Four US states adopted binding court rules in 2026 requiring citation checks, with AI named as the motivation: New York, Florida, Connecticut and Indiana. An independent analysis of 84 readable state-court decisions from a public AI hallucination database, 32 of them issued after the relevant rule took effect, found that 11 (34%) cite the new rule. New York courts cited none of their 15 post-rule decisions to its new rule, instead relying mostly on an older frivolous-conduct rule. Florida's appellate courts cited their amended rule most often, and the author checked all matched passages by hand. The author cautions that the database is not a complete census and that courts may apply a rule without citing it by number.

0
ProgrammingDEV Community ·

EU Commission to Host Data Spaces and AI Sessions at Web Summit 2026 in Lisbon

The European Commission's DG Connect will run a programme on data sharing and artificial intelligence at Web Summit 2026 in Lisbon, scheduled for November 10 to 12. Sessions include a fireside chat with Executive Vice-President Henna Virkkunen and masterclasses on data spaces for SMEs and practical AI support for innovators. The programme is aimed at policy outreach and capacity-building rather than product launches. Organisers present shared data as a potential source of business value, particularly for smaller companies with limited internal data. Analysts suggest businesses should weigh data-access and regulatory conditions before making technology investment decisions.

0
ProgrammingDEV Community ·

Google Brings Maps Into AI Studio, Letting Developers Build Location Apps From a Prompt

On November 9, 2026, Google announced that developers can build location-aware apps with Google Maps Platform directly inside Google AI Studio. Users describe their idea to Gemini in plain language, and the system configures the Maps Platform and manages the API key before loading an interactive map in the preview. Google's demonstration showed an interactive 3D tour of New York City landmarks generated from a single prompt. The announcement groups capabilities into Maps, Places, Routes, and Environment, with three remixable example apps provided. Free demo usage is limited to 100 calls per API per day, and the free tier's coverage varies depending on whether a user is new to Google Cloud.