AR
Product
Arubaos
by Arubanetworks · last CVE May 12, 2026
233
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 45High 121Medium 56Low 4
Watch

Add Arubaos to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-37907
7.5
1%
Dec 12
A vulnerability exists in the ArubaOS bootloader on 7xxx series controllers which can result in a denial of service (DoS) condition on an impacted system
Affected: 6.5.4.0 before 6.5.4.23; 8.4.0.0 before 8.6.0.18; 8.7.0.0 before 8.7.1.10; 8.8.0.0 before 8.10.0.0; 10.3.0.0
CVE-2016-2032
7.5
3%
Jan 31
A vulnerability exists in the Aruba AirWave Management Platform 8.x prior to 8.2 in the management interface of an underlying system component called RabbitMQ, which could let a…
Affected: All versions, or not specified
CVE-2018-7080
7.5
1%
Dec 7
A vulnerability exists in the firmware of embedded BLE radios that are part of some Aruba Access points
Affected: 6.4.4.0 before 6.4.4.20; 6.5.3.0 before 6.5.3.9; 6.5.4.0 before 6.5.4.9; 8.0.0.0 before 8.2.2.2; 8.3.0.0 before 8.3.0.4
CVE-2026-44872
7.2
1%
May 12
Authenticated Arbitrary File Upload via Command Injection in AOS-8 AND AOS-10 Web-Based Management Interface
Affected: 6.5.4.0 before 8.10.0.22; 8.11.0.0 before 8.12.0.7; 8.13.0.0 before 8.13.1.2; 10.4.0.0 before 10.4.1.11; 10.5.0.0 before 10.7.2.3
CVE-2026-44865
7.2
1%
May 12
Authenticated Command Injection Vulnerabilities in the Web-Based Management Interface of AOS-8 and AOS-10
Affected: 6.5.4.0 before 8.10.0.22; 8.11.0.0 before 8.12.0.7; 8.13.0.0 before 8.13.1.2; 10.4.0.0 before 10.4.1.11; 10.5.0.0 before 10.7.2.3
CVE-2026-44864
7.2
0%
May 12
Authenticated Remote Code Execution via SQL Injection in AOS-8 and AOS-10 Operating Systems
Affected: 6.5.4.0 before 8.10.0.22; 8.11.0.0 before 8.12.0.7; 8.13.0.0 before 8.13.1.2; 10.4.0.0 before 10.4.1.11; 10.5.0.0 before 10.7.2.3
CVE-2026-44863
7.2
0%
May 12
Authenticated Remote Code Execution via SQL Injection in AOS-8 and AOS-10 Operating Systems
Affected: 6.5.4.0 before 8.10.0.22; 8.11.0.0 before 8.12.0.7; 8.13.0.0 before 8.13.1.2; 10.4.0.0 before 10.4.1.11; 10.5.0.0 before 10.7.2.3
CVE-2026-44862
7.2
0%
May 12
Authenticated Remote Code Execution via SQL Injection in AOS-8 and AOS-10 Operating Systems
Affected: 6.5.4.0 before 8.10.0.22; 8.11.0.0 before 8.12.0.7; 8.13.0.0 before 8.13.1.2; 10.4.0.0 before 10.4.1.11; 10.5.0.0 before 10.7.2.3
CVE-2026-44861
7.2
0%
May 12
Authenticated Remote Code Execution via SQL Injection in AOS-8 and AOS-10 Operating Systems
Affected: 6.5.4.0 before 8.10.0.22; 8.11.0.0 before 8.12.0.7; 8.13.0.0 before 8.13.1.2; 10.4.0.0 before 10.4.1.11; 10.5.0.0 before 10.7.2.3
CVE-2026-44860
7.2
0%
May 12
Authenticated Remote Code Execution via SQL Injection in AOS-8 and AOS-10 Operating Systems
Affected: 6.5.4.0 before 8.10.0.22; 8.11.0.0 before 8.12.0.7; 8.13.0.0 before 8.13.1.2; 10.4.0.0 before 10.4.1.11; 10.5.0.0 before 10.7.2.3
CVE-2026-44859
7.2
0%
May 12
Authenticated Stack-Based Buffer Overflow in PAPI Services
Affected: 6.5.4.0 before 8.10.0.22; 8.11.0.0 before 8.12.0.7; 8.13.0.0 before 8.13.1.2; 10.4.0.0 before 10.4.1.11; 10.5.0.0 before 10.7.2.3
CVE-2026-44858
7.2
0%
May 12
Authenticated Stack-Based Buffer Overflow in PAPI Services
Affected: 6.5.4.0 before 8.10.0.22; 8.11.0.0 before 8.12.0.7; 8.13.0.0 before 8.13.1.2; 10.4.0.0 before 10.4.1.11; 10.5.0.0 before 10.7.2.3
CVE-2026-44857
7.2
0%
May 12
Authenticated Stack-Based Buffer Overflow in PAPI Services
Affected: 6.5.4.0 before 8.10.0.22; 8.11.0.0 before 8.12.0.7; 8.13.0.0 before 8.13.1.2; 10.4.0.0 before 10.4.1.11; 10.5.0.0 before 10.7.2.3
CVE-2026-44856
7.2
0%
May 12
Authenticated Stack-Based Buffer Overflow in PAPI Services
Affected: 6.5.4.0 before 8.10.0.22; 8.11.0.0 before 8.12.0.7; 8.13.0.0 before 8.13.1.2; 10.4.0.0 before 10.4.1.11; 10.5.0.0 before 10.7.2.3
CVE-2026-44855
7.2
0%
May 12
Authenticated Stack-Based Buffer Overflow in PAPI Services
Affected: 6.5.4.0 before 8.10.0.22; 8.11.0.0 before 8.12.0.7; 8.13.0.0 before 8.13.1.2; 10.4.0.0 before 10.4.1.11; 10.5.0.0 before 10.7.2.3
CVE-2026-44854
7.2
1%
May 12
Authenticated Remote Code Execution via Arbitrary File Write in AOS-8 and AOS-10 Web-Based Management Interface
Affected: 6.5.4.0 before 8.10.0.22; 8.11.0.0 before 8.12.0.7; 8.13.0.0 before 8.13.1.2; 10.4.0.0 before 10.4.1.11; 10.5.0.0 before 10.7.2.3
CVE-2026-44853
7.2
1%
May 12
Authenticated Remote Code Execution via Arbitrary File Write in AOS-8 and AOS-10 Web-Based Management Interface
Affected: 6.5.4.0 before 8.10.0.22; 8.11.0.0 before 8.12.0.7; 8.13.0.0 before 8.13.1.2; 10.4.0.0 before 10.4.1.11; 10.5.0.0 before 10.7.2.3
CVE-2026-44852
7.2
0%
May 12
Authenticated Remote Code Execution via Arbitrary File Overwrite in the AOS-8 and AOS-10 Web-Based Management Interface
Affected: 6.5.4.0 before 8.10.0.22; 8.11.0.0 before 8.12.0.7; 8.13.0.0 before 8.13.1.2; 10.4.0.0 before 10.4.1.11; 10.5.0.0 before 10.7.2.3
CVE-2026-23823
7.2
1%
May 12
Authenticated Command Injection leads to RCE in AOS-10 CLI Command
Affected: 6.4.0.0 through 6.5.4.24; 8.4.0.0 before 8.10.0.0; 8.11.0.0 before 8.12.0.7; 10.3.0.0 before 10.4.0.0; 10.7.0.0 through 10.8.0.0
CVE-2026-23821
7.2
1%
May 12
Inconsistent input filtering allows Authenticated Command Injection in AOS-10 CLI
Affected: 6.4.0.0 through 6.5.4.24; 8.4.0.0 before 8.10.0.0; 8.11.0.0 before 8.12.0.7; 10.3.0.0 before 10.4.1.11; 10.5.0.0 before 10.7.2.3; 10.8.0.0
CVE-2026-23820
7.2
1%
May 12
Inconsistent input filtering allows Authenticated Command Injection in AOS-8 Instant and AOS-10 CLI
Affected: 6.4.0.0 through 6.5.4.24; 8.4.0.0 before 8.10.0.22; 8.11.0.0 before 8.12.0.7; 8.13.0.0 before 8.13.1.2; 10.3.0.0 before 10.4.1.11; 10.5.0.0 before 10.7.2.3; +1 more
CVE-2025-37176
7.2
1%
Jan 13
Authenticated Command Injection Vulnerability in an AOS-8 operating system's internal workflow
Affected: 8.6.0.0 before 8.10.0.21; 8.11.0.0 before 8.13.1.1
CVE-2025-37175
7.2
1%
Jan 13
Authenticated Arbitrary File Upload Vulnerability in AOS-10 or AOS-8 Web-Based Management Interface
Affected: 6.5.4.0 before 8.10.0.21; 8.11.0.0 before 8.13.1.1; 10.3.0.0 before 10.4.1.10; 10.5.0.0 before 10.7.2.2
CVE-2025-37174
7.2
1%
Jan 13
Authenticated Arbitrary File Write Vulnerability in AOS 10 and AOS-8 Web-Based Management Interface
Affected: 6.5.4.0 before 8.10.0.21; 8.11.0.0 before 8.13.1.1; 10.3.0.0 before 10.4.1.10; 10.5.0.0 before 10.7.2.2
CVE-2025-37173
7.2
0%
Jan 13
Improper Input Handling Vulnerability in Authenticated Configuration API Endpoint (AOS-10/AOS-8 Web UI)
Affected: 6.5.4.0 before 8.10.0.21; 8.11.0.0 before 8.13.1.1; 10.3.0.0 before 10.4.1.10; 10.5.0.0 before 10.7.2.2
CVE-2025-37172
7.2
1%
Jan 13
Authenticated Command Injection Vulnerabilities in AOS-8 Web-Based Management Interface
Affected: 8.6.0.0 before 8.10.0.21; 8.11.0.0 before 8.13.1.1
CVE-2025-37171
7.2
1%
Jan 13
Authenticated Command Injection Vulnerabilities in AOS-8 Web-Based Management Interface
Affected: 8.6.0.0 before 8.10.0.21; 8.11.0.0 before 8.13.1.1
CVE-2025-37170
7.2
1%
Jan 13
Authenticated Command Injection Vulnerabilities in AOS-8 Web-Based Management Interface
Affected: 8.6.0.0 before 8.10.0.21; 8.11.0.0 before 8.13.1.1
CVE-2025-37169
7.2
1%
Jan 13
Stack Overflow Vulnerability in AOS-10 Web-Based Management Interface
Affected: 10.3.0.0 before 10.4.1.10; 10.5.0.0 before 10.7.2.2
CVE-2025-37134
7.2
1%
Oct 14
Authenticated Command Injection Vulnerability in the Low-Level Interface Library Affecting AOS-10 GW and AOS-8 Controller/Mobility Conductor Web-Based Management Interface
Affected: 8.10.0.0 before 8.10.0.19; 8.12.0.0 before 8.12.0.6; 8.13.0.0 before 8.13.1.0; 10.4.0.0 before 10.4.1.9; 10.7.0.0 before 10.7.2.1
CVE-2025-37133
7.2
1%
Oct 14
Authenticated Command Injection Vulnerability in AOS-8 Controller/Mobility Conductor Web-Based Management Interface via the CLI Binaryalong with accounting controls for tracking and logging user activities and resource usage.
Affected: 8.10.0.0 before 8.10.0.19; 8.12.0.0 before 8.12.0.6; 8.13.0.0 before 8.13.1.0; 10.4.0.0 before 10.4.1.9; 10.7.0.0 before 10.7.2.1
CVE-2025-37132
7.2
1%
Oct 14
Authenticated Remote Code Execution Vulnerability in AOS-10 GW and AOS-8 Controller/Mobility Conductor Web-Based Management Interface via Arbitrary File Write
Affected: 8.10.0.0 before 8.10.0.19; 8.12.0.0 before 8.12.0.6; 8.13.0.0 before 8.13.1.0; 10.4.0.0 before 10.4.1.9; 10.7.0.0 before 10.7.2.1
CVE-2025-27083
7.2
1%
Apr 8
Authenticated command injection vulnerabilities exist in the AOS-10 GW and AOS-8 Controller/Mobility Conductor web-based management interface
Affected: 8.10.0.0 before 8.10.0.16; 8.12.0.0 before 8.12.0.4; 10.4.0.0 before 10.4.1.7; 10.7.0.0 before 10.7.1.1
CVE-2025-27082
7.2
1%
Apr 8
Arbitrary File Write vulnerabilities exist in the web-based management interface of both the AOS-10 GW and AOS-8 Controller/Mobility Conductor operating systems
Affected: 8.10.0.0 before 8.10.0.16; 8.12.0.0 before 8.12.0.4; 10.4.0.0 before 10.4.1.7; 10.7.0.0 before 10.7.1.1
CVE-2024-25613
7.2
1%
Mar 5
Authenticated command injection vulnerabilities exist in the ArubaOS command line interface
Affected: 8.10.0.0 before 8.10.0.10; 8.11.0.0 before 8.11.2.1; 10.4.0.0 before 10.4.1.0; 10.5.0.0 before 10.5.1.0
CVE-2024-25612
7.2
1%
Mar 5
Authenticated command injection vulnerabilities exist in the ArubaOS command line interface
Affected: 8.10.0.0 before 8.10.0.10; 8.11.0.0 before 8.11.2.1; 10.4.0.0 before 10.4.1.0; 10.5.0.0 before 10.5.1.0
CVE-2024-25611
7.2
1%
Mar 5
Authenticated command injection vulnerabilities exist in the ArubaOS command line interface
Affected: 8.10.0.0 before 8.10.0.10; 8.11.0.0 before 8.11.2.1; 10.4.0.0 before 10.4.1.0; 10.5.0.0 before 10.5.1.0
CVE-2024-1356
7.2
1%
Mar 5
Authenticated command injection vulnerabilities exist in the ArubaOS command line interface
Affected: 8.10.0.0 through 8.10.0.9; 8.11.0.0 through 8.11.2.0; 10.4.0.0 through 10.4.0.3; 10.5.0.0 through 10.5.0.1
CVE-2023-45626
7.2
1%
Nov 14
An authenticated vulnerability has been identified allowing an attacker to effectively establish highly privileged persistent arbitrary code execution across boot cycles
Affected: 10.3.0.0 before 10.4.0.3; 10.5.0.0
CVE-2023-45625
7.2
2%
Nov 14
Multiple authenticated command injection vulnerabilities exist in the command line interface
Affected: 10.3.0.0 before 10.4.0.3; 10.5.0.0
CVE-2023-35974
7.2
1%
Jul 5
Authenticated command injection vulnerabilities exist in the ArubaOS command line interface
Affected: 6.5.4.0 before 8.6.0.21; 8.7.0.0 before 8.10.0.7; 8.11.0.0 before 8.11.1.1; 10.4.0.0 before 10.4.0.2
CVE-2023-35973
7.2
1%
Jul 5
Authenticated command injection vulnerabilities exist in the ArubaOS command line interface
Affected: 6.5.4.0 before 8.6.0.21; 8.7.0.0 before 8.10.0.7; 8.11.0.0 before 8.11.1.1; 10.4.0.0 before 10.4.0.2
CVE-2023-35972
7.2
2%
Jul 5
An authenticated remote command injection vulnerability exists in the ArubaOS web-based management interface. Successful exploitation of this vulnerability results in the ability…
Affected: 6.5.4.0 before 8.6.0.21; 8.7.0.0 before 8.10.0.7; 8.11.0.0 before 8.11.1.1; 10.4.0.0 before 10.4.0.2
CVE-2023-22770
7.2
1%
Mar 1
Authenticated command injection vulnerabilities exist in the ArubaOS command line interface
Affected: 8.6.0.0 through 8.6.0.19; 8.10.0.0 through 8.10.0.4; 10.3.0.0 through 10.3.1.0
CVE-2023-22769
7.2
1%
Mar 1
Authenticated command injection vulnerabilities exist in the ArubaOS command line interface
Affected: 8.6.0.0 through 8.6.0.19; 8.10.0.0 through 8.10.0.4; 10.3.0.0 through 10.3.1.0
CVE-2023-22768
7.2
1%
Mar 1
Authenticated command injection vulnerabilities exist in the ArubaOS command line interface
Affected: 8.6.0.0 through 8.6.0.19; 8.10.0.0 through 8.10.0.4; 10.3.0.0 through 10.3.1.0
CVE-2023-22767
7.2
1%
Mar 1
Authenticated command injection vulnerabilities exist in the ArubaOS command line interface
Affected: 8.6.0.0 through 8.6.0.19; 8.10.0.0 through 8.10.0.4; 10.3.0.0 through 10.3.1.0
CVE-2023-22766
7.2
1%
Mar 1
Authenticated command injection vulnerabilities exist in the ArubaOS command line interface
Affected: 8.6.0.0 through 8.6.0.19; 8.10.0.0 through 8.10.0.4; 10.3.0.0 through 10.3.1.0
CVE-2023-22765
7.2
1%
Mar 1
Authenticated command injection vulnerabilities exist in the ArubaOS command line interface
Affected: 8.6.0.0 through 8.6.0.19; 8.10.0.0 through 8.10.0.4; 10.3.0.0 through 10.3.1.0
CVE-2023-22764
7.2
1%
Mar 1
Authenticated command injection vulnerabilities exist in the ArubaOS command line interface
Affected: 8.6.0.0 through 8.6.0.19; 8.10.0.0 through 8.10.0.4; 10.3.0.0 through 10.3.1.0
Page 2 of 3 · 121 total