CVE-2026-79895: Turning This Patch Into a Lifecycle Control

CVE‑2026‑79895 highlights a critical inventory problem where vendors release fixed HPE Networking ArubaOS updates, but organizations may not know which wireless controllers, gateways, and access points run affected AOS‑10 branches. The advisory HPESBNW05162 describes unauthenticated remote denial‑of‑service vulnerabilities in an AOS‑10 interface, scoring CVSS 3.1 7.5 High. CISA classifies the flaw as CWE‑400, emphasizing the need for asset governance.