SD
Product
Sd-wan
89
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 16High 57Medium 15Low 1
Watch
Add Sd-wan to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-26305 | 9.8 | May 1 | There is a buffer overflow vulnerability in the underlying Utility daemon that could lead to unauthenticated remote code execution by sending specially crafted packets destined to… Affected: 8.6.0.4-2.2.0.0; 8.6.0.4-2.2.0.7; 8.7.0.0-2.3.0.0; 8.7.0.0-2.3.0.9 |
| CVE-2023-22757 | 9.8 | Mar 1 | There are buffer overflow vulnerabilities in multiple underlying operating system processes that could lead to unauthenticated remote code execution by sending specially crafted… Affected: 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.8 |
| CVE-2023-22756 | 9.8 | Mar 1 | There are buffer overflow vulnerabilities in multiple underlying operating system processes that could lead to unauthenticated remote code execution by sending specially crafted… Affected: 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.8 |
| CVE-2023-22755 | 9.8 | Mar 1 | There are buffer overflow vulnerabilities in multiple underlying operating system processes that could lead to unauthenticated remote code execution by sending specially crafted… Affected: 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.8 |
| CVE-2023-22754 | 9.8 | Mar 1 | There are buffer overflow vulnerabilities in multiple underlying operating system processes that could lead to unauthenticated remote code execution by sending specially crafted… Affected: 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.8 |
| CVE-2023-22753 | 9.8 | Mar 1 | There are buffer overflow vulnerabilities in multiple underlying operating system processes that could lead to unauthenticated remote code execution by sending specially crafted… Affected: 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.8 |
| CVE-2023-22752 | 9.8 | Mar 1 | There are stack-based buffer overflow vulnerabilities that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba… Affected: 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.8 |
| CVE-2023-22751 | 9.8 | Mar 1 | There are stack-based buffer overflow vulnerabilities that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba… Affected: 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.8 |
| CVE-2023-22750 | 9.8 | Mar 1 | There are multiple command injection vulnerabilities that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba… Affected: 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.8 |
| CVE-2023-22749 | 9.8 | Mar 1 | There are multiple command injection vulnerabilities that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba… Affected: 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.8 |
| CVE-2023-22748 | 9.8 | Mar 1 | There are multiple command injection vulnerabilities that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba… Affected: 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.8 |
| CVE-2023-22747 | 9.8 | Mar 1 | There are multiple command injection vulnerabilities that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba… Affected: 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.8 |
| CVE-2022-37897 | 9.8 | Dec 12 | There is a command injection vulnerability that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks AP… Affected: 8.5.0.0-2.1.0.0 before 8.7.0.0-2.3.0.7 |
| CVE-2021-37716 | 9.8 | Sep 7 | A remote buffer overflow vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0.4; Prior to… Affected: 2.2.0.0 before 2.2.0.4 |
| CVE-2020-24634 | 9.8 | Dec 11 | An attacker is able to remotely inject arbitrary commands by sending especially crafted packets destined to the PAPI (Aruba Networks AP Management protocol) UDP port (8211) of… Affected: before 2.1.0.2; 2.2.0.0 before 2.2.0.1 |
| CVE-2020-24633 | 9.8 | Dec 11 | There are multiple buffer overflow vulnerabilities that could lead to unauthenticated remote code execution by sending especially crafted packets destined to the PAPI (Aruba… Affected: before 2.1.0.2; 2.2.0.0 before 2.2.0.1 |
| CVE-2026-44871 | 8.8 | May 12 | Authenticated Command Injection Vulnerabilities in Command Line Interface (CLI) Service Accessed by PAPI Protocol of AOS-8 and AOS-10 Operating Systems Affected: 8.6.0.4-2.2.0.0 through 8.6.0.4-2.2.0.7; 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.9 |
| CVE-2026-44870 | 8.8 | May 12 | Authenticated Command Injection Vulnerabilities in Command Line Interface (CLI) Service Accessed by PAPI Protocol of AOS-8 and AOS-10 Operating Systems Affected: 8.6.0.4-2.2.0.0 through 8.6.0.4-2.2.0.7; 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.9 |
| CVE-2026-44869 | 8.8 | May 12 | Authenticated Command Injection Vulnerabilities in the Web-Based Management Interface of AOS-8 and AOS-10 Affected: 8.6.0.4-2.2.0.0 through 8.6.0.4-2.2.0.7; 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.9 |
| CVE-2026-44868 | 8.8 | May 12 | Authenticated Command Injection Vulnerabilities in the Web-Based Management Interface of AOS-8 and AOS-10 Affected: 8.6.0.4-2.2.0.0 through 8.6.0.4-2.2.0.7; 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.9 |
| CVE-2026-44867 | 8.8 | May 12 | Authenticated Command Injection Vulnerabilities in the Web-Based Management Interface of AOS-8 and AOS-10 Affected: 8.6.0.4-2.2.0.0 through 8.6.0.4-2.2.0.7; 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.9 |
| CVE-2026-44866 | 8.8 | May 12 | Authenticated Command Injection Vulnerabilities in the Web-Based Management Interface of AOS-8 and AOS-10 Affected: 8.6.0.4-2.2.0.0 through 8.6.0.4-2.2.0.7; 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.9 |
| CVE-2022-37912 | 8.8 | Dec 12 | Authenticated command injection vulnerabilities exist in the ArubaOS command line interface Affected: 8.5.0.0-2.1.0.0 before 8.7.0.0-2.3.0.7 |
| CVE-2022-37905 | 8.8 | Dec 12 | Vulnerabilities in ArubaOS running on 7xxx series controllers exist that allows an attacker to execute arbitrary code during the boot sequence Affected: 8.5.0.0-2.1.0.0 before 8.7.0.0-2.3.0.7 |
| CVE-2022-37904 | 8.8 | Dec 12 | Vulnerabilities in ArubaOS running on 7xxx series controllers exist that allows an attacker to execute arbitrary code during the boot sequence Affected: 8.5.0.0-2.1.0.0 before 8.7.0.0-2.3.0.7 |
| CVE-2022-37903 | 8.8 | Dec 12 | A vulnerability exists that allows an authenticated attacker to overwrite an arbitrary file with attacker-controlled content via the web interface Affected: 8.5.0.0-2.1.0.0 before 8.7.0.0-2.3.0.7 |
| CVE-2022-37906 | 8.1 | Dec 12 | An authenticated path traversal vulnerability exists in the ArubaOS command line interface Affected: 8.5.0.0-2.1.0.0 before 8.7.0.0-2.3.0.7 |
| CVE-2021-37725 | 8.1 | Sep 7 | A remote cross-site request forgery (csrf) vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to… Affected: 2.2.0.0 before 2.2.0.4 |
| CVE-2026-23827 | 7.5 | May 12 | Unauthenticated Remote Code Execution via Heap Buffer Overflow in Network Management Service Affected: 8.6.0.4-2.2.0.0 through 8.6.0.4-2.2.0.7; 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.9 |
| CVE-2026-23826 | 7.5 | May 12 | Unauthenticated Denial of Service in AOS-8 Network Management Service Affected: 8.6.0.4-2.2.0.0 through 8.6.0.4-2.2.0.7; 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.9 |
| CVE-2026-23825 | 7.5 | May 12 | Unauthenticated Denial-of-Service via Crafted Messages in a Network Protocol Handling Component Affected: 8.6.0.4-2.2.0.0 through 8.6.0.4-2.2.0.7; 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.9 |
| CVE-2026-23824 | 7.5 | May 12 | Unauthenticated Denial-of-Service via Crafted Messages in a Network Protocol Handling Component Affected: 8.6.0.4-2.2.0.0 through 8.6.0.4-2.2.0.7; 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.9 |
| CVE-2022-37907 | 7.5 | Dec 12 | A vulnerability exists in the ArubaOS bootloader on 7xxx series controllers which can result in a denial of service (DoS) condition on an impacted system Affected: 8.5.0.0-2.1.0.0 before 8.7.0.0-2.3.0.7 |
| CVE-2026-44872 | 7.2 | May 12 | Authenticated Arbitrary File Upload via Command Injection in AOS-8 AND AOS-10 Web-Based Management Interface Affected: 8.6.0.4-2.2.0.0 through 8.6.0.4-2.2.0.7; 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.9 |
| CVE-2026-44865 | 7.2 | May 12 | Authenticated Command Injection Vulnerabilities in the Web-Based Management Interface of AOS-8 and AOS-10 Affected: 8.6.0.4-2.2.0.0 through 8.6.0.4-2.2.0.7; 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.9 |
| CVE-2026-44864 | 7.2 | May 12 | Authenticated Remote Code Execution via SQL Injection in AOS-8 and AOS-10 Operating Systems Affected: 8.6.0.4-2.2.0.0 through 8.6.0.4-2.2.0.7; 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.9 |
| CVE-2026-44863 | 7.2 | May 12 | Authenticated Remote Code Execution via SQL Injection in AOS-8 and AOS-10 Operating Systems Affected: 8.6.0.4-2.2.0.0 through 8.6.0.4-2.2.0.7; 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.9 |
| CVE-2026-44862 | 7.2 | May 12 | Authenticated Remote Code Execution via SQL Injection in AOS-8 and AOS-10 Operating Systems Affected: 8.6.0.4-2.2.0.0 through 8.6.0.4-2.2.0.7; 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.9 |
| CVE-2026-44861 | 7.2 | May 12 | Authenticated Remote Code Execution via SQL Injection in AOS-8 and AOS-10 Operating Systems Affected: 8.6.0.4-2.2.0.0 through 8.6.0.4-2.2.0.7; 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.9 |
| CVE-2026-44860 | 7.2 | May 12 | Authenticated Remote Code Execution via SQL Injection in AOS-8 and AOS-10 Operating Systems Affected: 8.6.0.4-2.2.0.0 through 8.6.0.4-2.2.0.7; 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.9 |
| CVE-2026-44859 | 7.2 | May 12 | Authenticated Stack-Based Buffer Overflow in PAPI Services Affected: 8.6.0.4-2.2.0.0 through 8.6.0.4-2.2.0.7; 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.9 |
| CVE-2026-44858 | 7.2 | May 12 | Authenticated Stack-Based Buffer Overflow in PAPI Services Affected: 8.6.0.4-2.2.0.0 through 8.6.0.4-2.2.0.7; 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.9 |
| CVE-2026-44857 | 7.2 | May 12 | Authenticated Stack-Based Buffer Overflow in PAPI Services Affected: 8.6.0.4-2.2.0.0 through 8.6.0.4-2.2.0.7; 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.9 |
| CVE-2026-44856 | 7.2 | May 12 | Authenticated Stack-Based Buffer Overflow in PAPI Services Affected: 8.6.0.4-2.2.0.0 through 8.6.0.4-2.2.0.7; 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.9 |
| CVE-2026-44855 | 7.2 | May 12 | Authenticated Stack-Based Buffer Overflow in PAPI Services Affected: 8.6.0.4-2.2.0.0 through 8.6.0.4-2.2.0.7; 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.9 |
| CVE-2026-44854 | 7.2 | May 12 | Authenticated Remote Code Execution via Arbitrary File Write in AOS-8 and AOS-10 Web-Based Management Interface Affected: 8.6.0.4-2.2.0.0 through 8.6.0.4-2.2.0.7; 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.9 |
| CVE-2026-44853 | 7.2 | May 12 | Authenticated Remote Code Execution via Arbitrary File Write in AOS-8 and AOS-10 Web-Based Management Interface Affected: 8.6.0.4-2.2.0.0 through 8.6.0.4-2.2.0.7; 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.9 |
| CVE-2026-44852 | 7.2 | May 12 | Authenticated Remote Code Execution via Arbitrary File Overwrite in the AOS-8 and AOS-10 Web-Based Management Interface Affected: 8.6.0.4-2.2.0.0 through 8.6.0.4-2.2.0.7; 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.9 |
| CVE-2023-22770 | 7.2 | Mar 1 | Authenticated command injection vulnerabilities exist in the ArubaOS command line interface Affected: 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.8 |
| CVE-2023-22769 | 7.2 | Mar 1 | Authenticated command injection vulnerabilities exist in the ArubaOS command line interface Affected: 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.8 |