SD
Product
Sd-wan
89
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 16High 57Medium 15Low 1
Watch
Add Sd-wan to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-44871 | 8.8 | May 12 | Authenticated Command Injection Vulnerabilities in Command Line Interface (CLI) Service Accessed by PAPI Protocol of AOS-8 and AOS-10 Operating Systems Affected: 8.6.0.4-2.2.0.0 through 8.6.0.4-2.2.0.7; 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.9 |
| CVE-2026-44870 | 8.8 | May 12 | Authenticated Command Injection Vulnerabilities in Command Line Interface (CLI) Service Accessed by PAPI Protocol of AOS-8 and AOS-10 Operating Systems Affected: 8.6.0.4-2.2.0.0 through 8.6.0.4-2.2.0.7; 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.9 |
| CVE-2026-44869 | 8.8 | May 12 | Authenticated Command Injection Vulnerabilities in the Web-Based Management Interface of AOS-8 and AOS-10 Affected: 8.6.0.4-2.2.0.0 through 8.6.0.4-2.2.0.7; 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.9 |
| CVE-2026-44868 | 8.8 | May 12 | Authenticated Command Injection Vulnerabilities in the Web-Based Management Interface of AOS-8 and AOS-10 Affected: 8.6.0.4-2.2.0.0 through 8.6.0.4-2.2.0.7; 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.9 |
| CVE-2026-44867 | 8.8 | May 12 | Authenticated Command Injection Vulnerabilities in the Web-Based Management Interface of AOS-8 and AOS-10 Affected: 8.6.0.4-2.2.0.0 through 8.6.0.4-2.2.0.7; 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.9 |
| CVE-2026-44866 | 8.8 | May 12 | Authenticated Command Injection Vulnerabilities in the Web-Based Management Interface of AOS-8 and AOS-10 Affected: 8.6.0.4-2.2.0.0 through 8.6.0.4-2.2.0.7; 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.9 |
| CVE-2022-37912 | 8.8 | Dec 12 | Authenticated command injection vulnerabilities exist in the ArubaOS command line interface Affected: 8.5.0.0-2.1.0.0 before 8.7.0.0-2.3.0.7 |
| CVE-2022-37905 | 8.8 | Dec 12 | Vulnerabilities in ArubaOS running on 7xxx series controllers exist that allows an attacker to execute arbitrary code during the boot sequence Affected: 8.5.0.0-2.1.0.0 before 8.7.0.0-2.3.0.7 |
| CVE-2022-37904 | 8.8 | Dec 12 | Vulnerabilities in ArubaOS running on 7xxx series controllers exist that allows an attacker to execute arbitrary code during the boot sequence Affected: 8.5.0.0-2.1.0.0 before 8.7.0.0-2.3.0.7 |
| CVE-2022-37903 | 8.8 | Dec 12 | A vulnerability exists that allows an authenticated attacker to overwrite an arbitrary file with attacker-controlled content via the web interface Affected: 8.5.0.0-2.1.0.0 before 8.7.0.0-2.3.0.7 |
| CVE-2022-37906 | 8.1 | Dec 12 | An authenticated path traversal vulnerability exists in the ArubaOS command line interface Affected: 8.5.0.0-2.1.0.0 before 8.7.0.0-2.3.0.7 |
| CVE-2021-37725 | 8.1 | Sep 7 | A remote cross-site request forgery (csrf) vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to… Affected: 2.2.0.0 before 2.2.0.4 |
| CVE-2026-23827 | 7.5 | May 12 | Unauthenticated Remote Code Execution via Heap Buffer Overflow in Network Management Service Affected: 8.6.0.4-2.2.0.0 through 8.6.0.4-2.2.0.7; 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.9 |
| CVE-2026-23826 | 7.5 | May 12 | Unauthenticated Denial of Service in AOS-8 Network Management Service Affected: 8.6.0.4-2.2.0.0 through 8.6.0.4-2.2.0.7; 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.9 |
| CVE-2026-23825 | 7.5 | May 12 | Unauthenticated Denial-of-Service via Crafted Messages in a Network Protocol Handling Component Affected: 8.6.0.4-2.2.0.0 through 8.6.0.4-2.2.0.7; 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.9 |
| CVE-2026-23824 | 7.5 | May 12 | Unauthenticated Denial-of-Service via Crafted Messages in a Network Protocol Handling Component Affected: 8.6.0.4-2.2.0.0 through 8.6.0.4-2.2.0.7; 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.9 |
| CVE-2022-37907 | 7.5 | Dec 12 | A vulnerability exists in the ArubaOS bootloader on 7xxx series controllers which can result in a denial of service (DoS) condition on an impacted system Affected: 8.5.0.0-2.1.0.0 before 8.7.0.0-2.3.0.7 |
| CVE-2026-44872 | 7.2 | May 12 | Authenticated Arbitrary File Upload via Command Injection in AOS-8 AND AOS-10 Web-Based Management Interface Affected: 8.6.0.4-2.2.0.0 through 8.6.0.4-2.2.0.7; 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.9 |
| CVE-2026-44865 | 7.2 | May 12 | Authenticated Command Injection Vulnerabilities in the Web-Based Management Interface of AOS-8 and AOS-10 Affected: 8.6.0.4-2.2.0.0 through 8.6.0.4-2.2.0.7; 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.9 |
| CVE-2026-44864 | 7.2 | May 12 | Authenticated Remote Code Execution via SQL Injection in AOS-8 and AOS-10 Operating Systems Affected: 8.6.0.4-2.2.0.0 through 8.6.0.4-2.2.0.7; 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.9 |
| CVE-2026-44863 | 7.2 | May 12 | Authenticated Remote Code Execution via SQL Injection in AOS-8 and AOS-10 Operating Systems Affected: 8.6.0.4-2.2.0.0 through 8.6.0.4-2.2.0.7; 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.9 |
| CVE-2026-44862 | 7.2 | May 12 | Authenticated Remote Code Execution via SQL Injection in AOS-8 and AOS-10 Operating Systems Affected: 8.6.0.4-2.2.0.0 through 8.6.0.4-2.2.0.7; 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.9 |
| CVE-2026-44861 | 7.2 | May 12 | Authenticated Remote Code Execution via SQL Injection in AOS-8 and AOS-10 Operating Systems Affected: 8.6.0.4-2.2.0.0 through 8.6.0.4-2.2.0.7; 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.9 |
| CVE-2026-44860 | 7.2 | May 12 | Authenticated Remote Code Execution via SQL Injection in AOS-8 and AOS-10 Operating Systems Affected: 8.6.0.4-2.2.0.0 through 8.6.0.4-2.2.0.7; 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.9 |
| CVE-2026-44859 | 7.2 | May 12 | Authenticated Stack-Based Buffer Overflow in PAPI Services Affected: 8.6.0.4-2.2.0.0 through 8.6.0.4-2.2.0.7; 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.9 |
| CVE-2026-44858 | 7.2 | May 12 | Authenticated Stack-Based Buffer Overflow in PAPI Services Affected: 8.6.0.4-2.2.0.0 through 8.6.0.4-2.2.0.7; 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.9 |
| CVE-2026-44857 | 7.2 | May 12 | Authenticated Stack-Based Buffer Overflow in PAPI Services Affected: 8.6.0.4-2.2.0.0 through 8.6.0.4-2.2.0.7; 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.9 |
| CVE-2026-44856 | 7.2 | May 12 | Authenticated Stack-Based Buffer Overflow in PAPI Services Affected: 8.6.0.4-2.2.0.0 through 8.6.0.4-2.2.0.7; 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.9 |
| CVE-2026-44855 | 7.2 | May 12 | Authenticated Stack-Based Buffer Overflow in PAPI Services Affected: 8.6.0.4-2.2.0.0 through 8.6.0.4-2.2.0.7; 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.9 |
| CVE-2026-44854 | 7.2 | May 12 | Authenticated Remote Code Execution via Arbitrary File Write in AOS-8 and AOS-10 Web-Based Management Interface Affected: 8.6.0.4-2.2.0.0 through 8.6.0.4-2.2.0.7; 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.9 |
| CVE-2026-44853 | 7.2 | May 12 | Authenticated Remote Code Execution via Arbitrary File Write in AOS-8 and AOS-10 Web-Based Management Interface Affected: 8.6.0.4-2.2.0.0 through 8.6.0.4-2.2.0.7; 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.9 |
| CVE-2026-44852 | 7.2 | May 12 | Authenticated Remote Code Execution via Arbitrary File Overwrite in the AOS-8 and AOS-10 Web-Based Management Interface Affected: 8.6.0.4-2.2.0.0 through 8.6.0.4-2.2.0.7; 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.9 |
| CVE-2023-22770 | 7.2 | Mar 1 | Authenticated command injection vulnerabilities exist in the ArubaOS command line interface Affected: 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.8 |
| CVE-2023-22769 | 7.2 | Mar 1 | Authenticated command injection vulnerabilities exist in the ArubaOS command line interface Affected: 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.8 |
| CVE-2023-22768 | 7.2 | Mar 1 | Authenticated command injection vulnerabilities exist in the ArubaOS command line interface Affected: 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.8 |
| CVE-2023-22767 | 7.2 | Mar 1 | Authenticated command injection vulnerabilities exist in the ArubaOS command line interface Affected: 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.8 |
| CVE-2023-22766 | 7.2 | Mar 1 | Authenticated command injection vulnerabilities exist in the ArubaOS command line interface Affected: 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.8 |
| CVE-2023-22765 | 7.2 | Mar 1 | Authenticated command injection vulnerabilities exist in the ArubaOS command line interface Affected: 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.8 |
| CVE-2023-22764 | 7.2 | Mar 1 | Authenticated command injection vulnerabilities exist in the ArubaOS command line interface Affected: 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.8 |
| CVE-2023-22763 | 7.2 | Mar 1 | Authenticated command injection vulnerabilities exist in the ArubaOS command line interface Affected: 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.8 |
| CVE-2023-22762 | 7.2 | Mar 1 | Authenticated command injection vulnerabilities exist in the ArubaOS command line interface Affected: 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.8 |
| CVE-2023-22761 | 7.2 | Mar 1 | Authenticated remote command injection vulnerabilities exist in the ArubaOS web-based management interface Affected: 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.8 |
| CVE-2023-22760 | 7.2 | Mar 1 | Authenticated remote command injection vulnerabilities exist in the ArubaOS web-based management interface Affected: 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.8 |
| CVE-2023-22759 | 7.2 | Mar 1 | Authenticated remote command injection vulnerabilities exist in the ArubaOS web-based management interface Affected: 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.8 |
| CVE-2023-22758 | 7.2 | Mar 1 | Authenticated remote command injection vulnerabilities exist in the ArubaOS web-based management interface Affected: 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.8 |
| CVE-2022-37902 | 7.2 | Dec 12 | Authenticated command injection vulnerabilities exist in the ArubaOS command line interface Affected: 8.5.0.0-2.1.0.0 before 8.7.0.0-2.3.0.7 |
| CVE-2022-37901 | 7.2 | Dec 12 | Authenticated command injection vulnerabilities exist in the ArubaOS command line interface Affected: 8.5.0.0-2.1.0.0 before 8.7.0.0-2.3.0.7 |
| CVE-2022-37900 | 7.2 | Dec 12 | Authenticated command injection vulnerabilities exist in the ArubaOS command line interface Affected: 8.5.0.0-2.1.0.0 before 8.7.0.0-2.3.0.7 |
| CVE-2022-37899 | 7.2 | Dec 12 | Authenticated command injection vulnerabilities exist in the ArubaOS command line interface Affected: 8.5.0.0-2.1.0.0 before 8.7.0.0-2.3.0.7 |
| CVE-2022-37898 | 7.2 | Dec 12 | Authenticated command injection vulnerabilities exist in the ArubaOS command line interface Affected: 8.5.0.0-2.1.0.0 before 8.7.0.0-2.3.0.7 |