AR
Product
Arubaos
233
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 45High 121Medium 56Low 4
Watch
Add Arubaos to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-44864 | 7.2 | May 12 | Authenticated Remote Code Execution via SQL Injection in AOS-8 and AOS-10 Operating Systems Affected: 6.5.4.0 before 8.10.0.22; 8.11.0.0 before 8.12.0.7; 8.13.0.0 before 8.13.1.2; 10.4.0.0 before 10.4.1.11; 10.5.0.0 before 10.7.2.3 |
| CVE-2026-44863 | 7.2 | May 12 | Authenticated Remote Code Execution via SQL Injection in AOS-8 and AOS-10 Operating Systems Affected: 6.5.4.0 before 8.10.0.22; 8.11.0.0 before 8.12.0.7; 8.13.0.0 before 8.13.1.2; 10.4.0.0 before 10.4.1.11; 10.5.0.0 before 10.7.2.3 |
| CVE-2026-44862 | 7.2 | May 12 | Authenticated Remote Code Execution via SQL Injection in AOS-8 and AOS-10 Operating Systems Affected: 6.5.4.0 before 8.10.0.22; 8.11.0.0 before 8.12.0.7; 8.13.0.0 before 8.13.1.2; 10.4.0.0 before 10.4.1.11; 10.5.0.0 before 10.7.2.3 |
| CVE-2026-44861 | 7.2 | May 12 | Authenticated Remote Code Execution via SQL Injection in AOS-8 and AOS-10 Operating Systems Affected: 6.5.4.0 before 8.10.0.22; 8.11.0.0 before 8.12.0.7; 8.13.0.0 before 8.13.1.2; 10.4.0.0 before 10.4.1.11; 10.5.0.0 before 10.7.2.3 |
| CVE-2026-44860 | 7.2 | May 12 | Authenticated Remote Code Execution via SQL Injection in AOS-8 and AOS-10 Operating Systems Affected: 6.5.4.0 before 8.10.0.22; 8.11.0.0 before 8.12.0.7; 8.13.0.0 before 8.13.1.2; 10.4.0.0 before 10.4.1.11; 10.5.0.0 before 10.7.2.3 |
| CVE-2026-44859 | 7.2 | May 12 | Authenticated Stack-Based Buffer Overflow in PAPI Services Affected: 6.5.4.0 before 8.10.0.22; 8.11.0.0 before 8.12.0.7; 8.13.0.0 before 8.13.1.2; 10.4.0.0 before 10.4.1.11; 10.5.0.0 before 10.7.2.3 |
| CVE-2026-44858 | 7.2 | May 12 | Authenticated Stack-Based Buffer Overflow in PAPI Services Affected: 6.5.4.0 before 8.10.0.22; 8.11.0.0 before 8.12.0.7; 8.13.0.0 before 8.13.1.2; 10.4.0.0 before 10.4.1.11; 10.5.0.0 before 10.7.2.3 |
| CVE-2026-44857 | 7.2 | May 12 | Authenticated Stack-Based Buffer Overflow in PAPI Services Affected: 6.5.4.0 before 8.10.0.22; 8.11.0.0 before 8.12.0.7; 8.13.0.0 before 8.13.1.2; 10.4.0.0 before 10.4.1.11; 10.5.0.0 before 10.7.2.3 |
| CVE-2026-44856 | 7.2 | May 12 | Authenticated Stack-Based Buffer Overflow in PAPI Services Affected: 6.5.4.0 before 8.10.0.22; 8.11.0.0 before 8.12.0.7; 8.13.0.0 before 8.13.1.2; 10.4.0.0 before 10.4.1.11; 10.5.0.0 before 10.7.2.3 |
| CVE-2026-44855 | 7.2 | May 12 | Authenticated Stack-Based Buffer Overflow in PAPI Services Affected: 6.5.4.0 before 8.10.0.22; 8.11.0.0 before 8.12.0.7; 8.13.0.0 before 8.13.1.2; 10.4.0.0 before 10.4.1.11; 10.5.0.0 before 10.7.2.3 |
| CVE-2026-44854 | 7.2 | May 12 | Authenticated Remote Code Execution via Arbitrary File Write in AOS-8 and AOS-10 Web-Based Management Interface Affected: 6.5.4.0 before 8.10.0.22; 8.11.0.0 before 8.12.0.7; 8.13.0.0 before 8.13.1.2; 10.4.0.0 before 10.4.1.11; 10.5.0.0 before 10.7.2.3 |
| CVE-2026-44853 | 7.2 | May 12 | Authenticated Remote Code Execution via Arbitrary File Write in AOS-8 and AOS-10 Web-Based Management Interface Affected: 6.5.4.0 before 8.10.0.22; 8.11.0.0 before 8.12.0.7; 8.13.0.0 before 8.13.1.2; 10.4.0.0 before 10.4.1.11; 10.5.0.0 before 10.7.2.3 |
| CVE-2026-44852 | 7.2 | May 12 | Authenticated Remote Code Execution via Arbitrary File Overwrite in the AOS-8 and AOS-10 Web-Based Management Interface Affected: 6.5.4.0 before 8.10.0.22; 8.11.0.0 before 8.12.0.7; 8.13.0.0 before 8.13.1.2; 10.4.0.0 before 10.4.1.11; 10.5.0.0 before 10.7.2.3 |
| CVE-2026-23823 | 7.2 | May 12 | Authenticated Command Injection leads to RCE in AOS-10 CLI Command Affected: 6.4.0.0 through 6.5.4.24; 8.4.0.0 before 8.10.0.0; 8.11.0.0 before 8.12.0.7; 10.3.0.0 before 10.4.0.0; 10.7.0.0 through 10.8.0.0 |
| CVE-2026-23821 | 7.2 | May 12 | Inconsistent input filtering allows Authenticated Command Injection in AOS-10 CLI Affected: 6.4.0.0 through 6.5.4.24; 8.4.0.0 before 8.10.0.0; 8.11.0.0 before 8.12.0.7; 10.3.0.0 before 10.4.1.11; 10.5.0.0 before 10.7.2.3; 10.8.0.0 |
| CVE-2026-23820 | 7.2 | May 12 | Inconsistent input filtering allows Authenticated Command Injection in AOS-8 Instant and AOS-10 CLI Affected: 6.4.0.0 through 6.5.4.24; 8.4.0.0 before 8.10.0.22; 8.11.0.0 before 8.12.0.7; 8.13.0.0 before 8.13.1.2; 10.3.0.0 before 10.4.1.11; 10.5.0.0 before 10.7.2.3; +1 more |
| CVE-2025-37176 | 7.2 | Jan 13 | Authenticated Command Injection Vulnerability in an AOS-8 operating system's internal workflow Affected: 8.6.0.0 before 8.10.0.21; 8.11.0.0 before 8.13.1.1 |
| CVE-2025-37175 | 7.2 | Jan 13 | Authenticated Arbitrary File Upload Vulnerability in AOS-10 or AOS-8 Web-Based Management Interface Affected: 6.5.4.0 before 8.10.0.21; 8.11.0.0 before 8.13.1.1; 10.3.0.0 before 10.4.1.10; 10.5.0.0 before 10.7.2.2 |
| CVE-2025-37174 | 7.2 | Jan 13 | Authenticated Arbitrary File Write Vulnerability in AOS 10 and AOS-8 Web-Based Management Interface Affected: 6.5.4.0 before 8.10.0.21; 8.11.0.0 before 8.13.1.1; 10.3.0.0 before 10.4.1.10; 10.5.0.0 before 10.7.2.2 |
| CVE-2025-37173 | 7.2 | Jan 13 | Improper Input Handling Vulnerability in Authenticated Configuration API Endpoint (AOS-10/AOS-8 Web UI) Affected: 6.5.4.0 before 8.10.0.21; 8.11.0.0 before 8.13.1.1; 10.3.0.0 before 10.4.1.10; 10.5.0.0 before 10.7.2.2 |
| CVE-2025-37172 | 7.2 | Jan 13 | Authenticated Command Injection Vulnerabilities in AOS-8 Web-Based Management Interface Affected: 8.6.0.0 before 8.10.0.21; 8.11.0.0 before 8.13.1.1 |
| CVE-2025-37171 | 7.2 | Jan 13 | Authenticated Command Injection Vulnerabilities in AOS-8 Web-Based Management Interface Affected: 8.6.0.0 before 8.10.0.21; 8.11.0.0 before 8.13.1.1 |
| CVE-2025-37170 | 7.2 | Jan 13 | Authenticated Command Injection Vulnerabilities in AOS-8 Web-Based Management Interface Affected: 8.6.0.0 before 8.10.0.21; 8.11.0.0 before 8.13.1.1 |
| CVE-2025-37169 | 7.2 | Jan 13 | Stack Overflow Vulnerability in AOS-10 Web-Based Management Interface Affected: 10.3.0.0 before 10.4.1.10; 10.5.0.0 before 10.7.2.2 |
| CVE-2025-37134 | 7.2 | Oct 14 | Authenticated Command Injection Vulnerability in the Low-Level Interface Library Affecting AOS-10 GW and AOS-8 Controller/Mobility Conductor Web-Based Management Interface Affected: 8.10.0.0 before 8.10.0.19; 8.12.0.0 before 8.12.0.6; 8.13.0.0 before 8.13.1.0; 10.4.0.0 before 10.4.1.9; 10.7.0.0 before 10.7.2.1 |
| CVE-2025-37133 | 7.2 | Oct 14 | Authenticated Command Injection Vulnerability in AOS-8 Controller/Mobility Conductor Web-Based Management Interface via the CLI Binaryalong with accounting controls for tracking and logging user activities and resource usage. Affected: 8.10.0.0 before 8.10.0.19; 8.12.0.0 before 8.12.0.6; 8.13.0.0 before 8.13.1.0; 10.4.0.0 before 10.4.1.9; 10.7.0.0 before 10.7.2.1 |
| CVE-2025-37132 | 7.2 | Oct 14 | Authenticated Remote Code Execution Vulnerability in AOS-10 GW and AOS-8 Controller/Mobility Conductor Web-Based Management Interface via Arbitrary File Write Affected: 8.10.0.0 before 8.10.0.19; 8.12.0.0 before 8.12.0.6; 8.13.0.0 before 8.13.1.0; 10.4.0.0 before 10.4.1.9; 10.7.0.0 before 10.7.2.1 |
| CVE-2025-27083 | 7.2 | Apr 8 | Authenticated command injection vulnerabilities exist in the AOS-10 GW and AOS-8 Controller/Mobility Conductor web-based management interface Affected: 8.10.0.0 before 8.10.0.16; 8.12.0.0 before 8.12.0.4; 10.4.0.0 before 10.4.1.7; 10.7.0.0 before 10.7.1.1 |
| CVE-2025-27082 | 7.2 | Apr 8 | Arbitrary File Write vulnerabilities exist in the web-based management interface of both the AOS-10 GW and AOS-8 Controller/Mobility Conductor operating systems Affected: 8.10.0.0 before 8.10.0.16; 8.12.0.0 before 8.12.0.4; 10.4.0.0 before 10.4.1.7; 10.7.0.0 before 10.7.1.1 |
| CVE-2024-25613 | 7.2 | Mar 5 | Authenticated command injection vulnerabilities exist in the ArubaOS command line interface Affected: 8.10.0.0 before 8.10.0.10; 8.11.0.0 before 8.11.2.1; 10.4.0.0 before 10.4.1.0; 10.5.0.0 before 10.5.1.0 |
| CVE-2024-25612 | 7.2 | Mar 5 | Authenticated command injection vulnerabilities exist in the ArubaOS command line interface Affected: 8.10.0.0 before 8.10.0.10; 8.11.0.0 before 8.11.2.1; 10.4.0.0 before 10.4.1.0; 10.5.0.0 before 10.5.1.0 |
| CVE-2024-25611 | 7.2 | Mar 5 | Authenticated command injection vulnerabilities exist in the ArubaOS command line interface Affected: 8.10.0.0 before 8.10.0.10; 8.11.0.0 before 8.11.2.1; 10.4.0.0 before 10.4.1.0; 10.5.0.0 before 10.5.1.0 |
| CVE-2024-1356 | 7.2 | Mar 5 | Authenticated command injection vulnerabilities exist in the ArubaOS command line interface Affected: 8.10.0.0 through 8.10.0.9; 8.11.0.0 through 8.11.2.0; 10.4.0.0 through 10.4.0.3; 10.5.0.0 through 10.5.0.1 |
| CVE-2023-45626 | 7.2 | Nov 14 | An authenticated vulnerability has been identified allowing an attacker to effectively establish highly privileged persistent arbitrary code execution across boot cycles Affected: 10.3.0.0 before 10.4.0.3; 10.5.0.0 |
| CVE-2023-45625 | 7.2 | Nov 14 | Multiple authenticated command injection vulnerabilities exist in the command line interface Affected: 10.3.0.0 before 10.4.0.3; 10.5.0.0 |
| CVE-2023-35974 | 7.2 | Jul 5 | Authenticated command injection vulnerabilities exist in the ArubaOS command line interface Affected: 6.5.4.0 before 8.6.0.21; 8.7.0.0 before 8.10.0.7; 8.11.0.0 before 8.11.1.1; 10.4.0.0 before 10.4.0.2 |
| CVE-2023-35973 | 7.2 | Jul 5 | Authenticated command injection vulnerabilities exist in the ArubaOS command line interface Affected: 6.5.4.0 before 8.6.0.21; 8.7.0.0 before 8.10.0.7; 8.11.0.0 before 8.11.1.1; 10.4.0.0 before 10.4.0.2 |
| CVE-2023-35972 | 7.2 | Jul 5 | An authenticated remote command injection vulnerability exists in the ArubaOS web-based management interface. Successful exploitation of this vulnerability results in the ability… Affected: 6.5.4.0 before 8.6.0.21; 8.7.0.0 before 8.10.0.7; 8.11.0.0 before 8.11.1.1; 10.4.0.0 before 10.4.0.2 |
| CVE-2023-22770 | 7.2 | Mar 1 | Authenticated command injection vulnerabilities exist in the ArubaOS command line interface Affected: 8.6.0.0 through 8.6.0.19; 8.10.0.0 through 8.10.0.4; 10.3.0.0 through 10.3.1.0 |
| CVE-2023-22769 | 7.2 | Mar 1 | Authenticated command injection vulnerabilities exist in the ArubaOS command line interface Affected: 8.6.0.0 through 8.6.0.19; 8.10.0.0 through 8.10.0.4; 10.3.0.0 through 10.3.1.0 |
| CVE-2023-22768 | 7.2 | Mar 1 | Authenticated command injection vulnerabilities exist in the ArubaOS command line interface Affected: 8.6.0.0 through 8.6.0.19; 8.10.0.0 through 8.10.0.4; 10.3.0.0 through 10.3.1.0 |
| CVE-2023-22767 | 7.2 | Mar 1 | Authenticated command injection vulnerabilities exist in the ArubaOS command line interface Affected: 8.6.0.0 through 8.6.0.19; 8.10.0.0 through 8.10.0.4; 10.3.0.0 through 10.3.1.0 |
| CVE-2023-22766 | 7.2 | Mar 1 | Authenticated command injection vulnerabilities exist in the ArubaOS command line interface Affected: 8.6.0.0 through 8.6.0.19; 8.10.0.0 through 8.10.0.4; 10.3.0.0 through 10.3.1.0 |
| CVE-2023-22765 | 7.2 | Mar 1 | Authenticated command injection vulnerabilities exist in the ArubaOS command line interface Affected: 8.6.0.0 through 8.6.0.19; 8.10.0.0 through 8.10.0.4; 10.3.0.0 through 10.3.1.0 |
| CVE-2023-22764 | 7.2 | Mar 1 | Authenticated command injection vulnerabilities exist in the ArubaOS command line interface Affected: 8.6.0.0 through 8.6.0.19; 8.10.0.0 through 8.10.0.4; 10.3.0.0 through 10.3.1.0 |
| CVE-2023-22763 | 7.2 | Mar 1 | Authenticated command injection vulnerabilities exist in the ArubaOS command line interface Affected: 8.6.0.0 through 8.6.0.19; 8.10.0.0 through 8.10.0.4; 10.3.0.0 through 10.3.1.0 |
| CVE-2023-22762 | 7.2 | Mar 1 | Authenticated command injection vulnerabilities exist in the ArubaOS command line interface Affected: 8.6.0.0 through 8.6.0.19; 8.10.0.0 through 8.10.0.4; 10.3.0.0 through 10.3.1.0 |
| CVE-2023-22761 | 7.2 | Mar 1 | Authenticated remote command injection vulnerabilities exist in the ArubaOS web-based management interface Affected: 8.6.0.0 through 8.6.0.19; 8.10.0.0 through 8.10.0.4; 10.3.0.0 through 10.3.1.0 |
| CVE-2023-22760 | 7.2 | Mar 1 | Authenticated remote command injection vulnerabilities exist in the ArubaOS web-based management interface Affected: 8.6.0.0 through 8.6.0.19; 8.10.0.0 through 8.10.0.4; 10.3.0.0 through 10.3.1.0 |
| CVE-2023-22759 | 7.2 | Mar 1 | Authenticated remote command injection vulnerabilities exist in the ArubaOS web-based management interface Affected: 8.6.0.0 through 8.6.0.19; 8.10.0.0 through 8.10.0.4; 10.3.0.0 through 10.3.1.0 |