CVE-2024-26305

Highest-risk unexploited with PoCs

Exploit code exists, no confirmed in-the-wild activity, ranked by EPSS

Actively Exploited

Confirmed exploited in the wild, sorted by most recently updated

CVSS 9.8EPSS 15%

Published 2024-05-01Updated 2025-04-27

Vulnerability details

There is a buffer overflow vulnerability in the underlying Utility daemon that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management protocol) UDP port (8211). Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CNAhpe

EPSS score history

Sources

2 links

PoC links are not available for guest users. Login to view them.

NVD Analysis CVE Organization

Vulnerability dashboard

Highest-risk unexploited with PoCs

Actively Exploited

Recently Updated