AA
Product
ArubaOS (AOS)
by Hewlett Packard Enterprise (HPE) · last CVE Oct 22, 2026
88
CVEs
0
On KEV
10.0
Max CVSS
71
New 30D
Severity mix
Critical 33High 44Medium 10Low 1
Watch

Add ArubaOS (AOS) to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-79879
New
8.8
0%
Oct 22
Unauthenticated Adjacent Memory Corruption Vulnerabilities lead to Remote Code Execution in AOS-10
Affected: 10.8.0.0 through 10.8.1.1; 10.7.0.0 through 10.7.2.6; 10.4.0.0 through 10.4.1.13
CVE-2026-79878
New
8.8
1%
Oct 22
Unauthenticated Adjacent Command Injection Vulnerability in the AOS-8 Command Line Interface Accessed by the PAPI Protocol
Affected: 8.13.0.0 through 8.13.3.0; 8.10.0.0 through 8.10.0.23
CVE-2026-79877
New
8.8
0%
Oct 22
Unauthenticated Adjacent Remote Code Execution Vulnerability in AOS-10
Affected: 10.8.0.0 through 10.8.1.1; 10.7.0.0 through 10.7.2.6; 10.4.0.0 through 10.4.1.13
CVE-2026-23819
8.8
0%
May 12
Error in SSID Processing allows Stored XSS in Web Management Interface
Affected: 10.8.0.0; 10.7.0.0 through 10.7.2.2; 10.4.0.0 through 10.4.1.10; 8.13.0.0 through 8.13.1.1; 8.12.0.0 through 8.12.0.6; 8.10.0.0 through 8.10.0.21
CVE-2026-79880
New
8.7
1%
Oct 22
Authenticated Server-Side Request Forgery leads to Remote Code Execution in AOS-8
Affected: 8.13.0.0 through 8.13.3.0; 8.10.0.0 through 8.10.0.23
CVE-2026-79883
New
8.3
0%
Oct 22
Unauthenticated Adjacent Buffer Overflow Vulnerability in the PAPI Protocol leads to Sensitive Information Disclosure in AOS-10
Affected: 10.8.0.0 through 10.8.1.1; 10.7.0.0 through 10.7.2.6; 10.4.0.0 through 10.4.1.13
CVE-2026-79882
New
8.3
1%
Oct 22
Unauthenticated Adjacent Command Injection Vulnerability in the PAPI Protocol of AOS-10
Affected: 10.8.0.0 through 10.8.1.1; 10.7.0.0 through 10.7.2.6; 10.4.0.0 through 10.4.1.13
CVE-2026-79881
New
8.3
0%
Oct 22
Authentication Bypass Leading to Remote Code Execution in AOS-8
Affected: 8.13.0.0 through 8.13.3.0; 8.10.0.0 through 8.10.0.23
CVE-2026-79886
New
8.2
0%
Oct 22
Unauthenticated Buffer Overflow Vulnerability leads to Denial-of-Service in AOS-8
Affected: 8.13.0.0 through 8.13.3.0; 8.10.0.0 through 8.10.0.23
CVE-2026-79885
New
8.2
0%
Oct 22
Unauthenticated File Write Vulnerability leads to Denial-of-Service in AOS-8
Affected: 8.13.0.0 through 8.13.3.0; 8.10.0.0 through 8.10.0.23
CVE-2026-79884
New
8.2
0%
Oct 22
Authentication Bypass leads to Sensitive Information Disclosure in AOS-8
Affected: 8.13.0.0 through 8.13.3.0; 8.10.0.0 through 8.10.0.23
CVE-2026-79891
New
8.1
1%
Oct 22
Unauthenticated Buffer Overflow Vulnerability leads to Remote Code Execution in AOS-8
Affected: 8.13.0.0 through 8.13.3.0; 8.10.0.0 through 8.10.0.23
CVE-2026-79890
New
8.1
1%
Oct 22
Unauthenticated Command Injection Vulnerabilities in AOS-8 Accessed by the PAPI Protocol
Affected: 8.13.0.0 through 8.13.3.0; 8.10.0.0 through 8.10.0.23
CVE-2026-79889
New
8.1
1%
Oct 22
Multiple Unauthenticated Buffer Overflow vulnerabilities in AOS-8 Web Interface result in Remote Code Execution
Affected: 8.13.0.0 through 8.13.3.0; 8.10.0.0 through 8.10.0.23
CVE-2026-79888
New
8.1
0%
Oct 22
Unauthenticated Buffer Overflow allows Remote Code Execution in web interface
Affected: 8.13.0.0 through 8.13.3.0; 8.10.0.0 through 8.10.0.23
CVE-2026-79887
New
8.1
1%
Oct 22
Authentication Bypass in Web Interface of AOS-8 allows Remote Command Execution (RCE)
Affected: 8.13.0.0 through 8.13.3.0; 8.10.0.0 through 8.10.0.23
CVE-2026-79892
New
7.8
0%
Oct 22
Authenticated Local Memory Corruption Vulnerability leads to Arbitrary Code Execution in AOS-8
Affected: 8.13.0.0 through 8.13.3.0; 8.10.0.0 through 8.10.0.23
CVE-2026-79955
New
7.5
1%
Oct 22
Unauthenticated Memory Corruption Vulnerability leads to Denial-of-Service in AOS-8
Affected: 8.13.0.0 through 8.13.3.0; 8.10.0.0 through 8.10.0.23
CVE-2026-79895
New
7.5
1%
Oct 22
Unauthenticated Remote Denial-of-Service (DoS) Vulnerabilities in AOS-10
Affected: 10.8.0.0 through 10.8.1.1; 10.7.0.0 through 10.7.2.6; 10.4.0.0 through 10.4.1.13
CVE-2026-79894
New
7.5
0%
Oct 22
Unauthenticated Denial-of-Service (DoS) Vulnerability in the PAPI Protocol of AOS-8
Affected: 8.13.0.0 through 8.13.3.0; 8.10.0.0 through 8.10.0.23
CVE-2026-79893
New
7.5
1%
Oct 22
Unauthenticated Memory Corruption Vulnerabilities lead to Denial-of-Service in AOS-10
Affected: 10.8.0.0 through 10.8.1.1; 10.7.0.0 through 10.7.2.6; 10.4.0.0 through 10.4.1.13
CVE-2025-37178
7.5
0%
Jan 13
Out-of-Bounds Read Vulnerabilities Leading to Process Crash in AOS-8 Operating System
Affected: 8.12.0.0 through 8.13.1.0; 8.10.0.0 through 8.10.0.20
CVE-2026-95709
New
7.2
1%
Oct 22
Authenticated Command Injection Vulnerabilities in AOS-10
Affected: 10.8.0.0 through 10.8.1.1; 10.7.0.0 through 10.7.2.6; 10.4.0.0 through 10.4.1.13
CVE-2026-95708
New
7.2
1%
Oct 22
Authenticated File Write leads to Command Injection Vulnerabilities in AOS-10
Affected: 10.8.0.0 through 10.8.1.1; 10.7.0.0 through 10.7.2.6; 10.4.0.0 through 10.4.1.13
CVE-2026-95707
New
7.2
1%
Oct 22
Authenticated Buffer Overflow Vulnerability leads to Remote Code Execution in AOS-8
Affected: 8.13.0.0 through 8.13.3.0; 8.10.0.0 through 8.10.0.23
CVE-2026-95706
New
7.2
1%
Oct 22
Authenticated Command Injection Vulnerabilities in AOS-8
Affected: 8.13.0.0 through 8.13.3.0; 8.10.0.0 through 8.10.0.23
CVE-2026-95705
New
7.2
1%
Oct 22
Authenticated Command Injection Vulnerabilities in AOS-8
Affected: 8.13.0.0 through 8.13.3.0; 8.10.0.0 through 8.10.0.23
CVE-2026-95704
New
7.2
1%
Oct 22
Authenticated Remote Code Execution allows Unauthorized System Control in Wireless Network Management Interface
Affected: 10.8.0.0 through 10.8.1.1; 10.7.0.0 through 10.7.2.6; 10.4.0.0 through 10.4.1.13; 8.13.0.0 through 8.13.3.0; 8.10.0.0 through 8.10.0.23
CVE-2026-79956
New
7.2
1%
Oct 22
Improper Sanitization leads to Command Injection in AOS-8 Web Interface
Affected: 8.13.0.0 through 8.13.3.0; 8.10.0.0 through 8.10.0.23
CVE-2026-23823
7.2
1%
May 12
Authenticated Command Injection leads to RCE in AOS-10 CLI Command
Affected: 10.8.0.0; 10.7.0.0 through 10.7.2.2
CVE-2026-23821
7.2
1%
May 12
Inconsistent input filtering allows Authenticated Command Injection in AOS-10 CLI
Affected: 10.8.0.0; 10.7.0.0 through 10.7.2.2; 10.4.0.0 through 10.4.1.10
CVE-2026-23820
7.2
1%
May 12
Inconsistent input filtering allows Authenticated Command Injection in AOS-8 Instant and AOS-10 CLI
Affected: 10.8.0.0; 10.7.0.0 through 10.7.2.2; 10.4.0.0 through 10.4.1.10; 8.13.0.0 through 8.13.1.1; 8.12.0.0 through 8.12.0.6; 8.10.0.0 through 8.10.0.21
CVE-2025-37176
7.2
1%
Jan 13
Authenticated Command Injection Vulnerability in an AOS-8 operating system's internal workflow
Affected: 8.12.0.0 through 8.13.1.0; 8.10.0.0 through 8.10.0.20
CVE-2025-37175
7.2
1%
Jan 13
Authenticated Arbitrary File Upload Vulnerability in AOS-10 or AOS-8 Web-Based Management Interface
Affected: 10.6.0.0 through 10.7.2.1; 10.3.0.0 through 10.4.1.9; 8.12.0.0 through 8.13.1.0; 8.10.0.0 through 8.10.0.20
CVE-2025-37174
7.2
1%
Jan 13
Authenticated Arbitrary File Write Vulnerability in AOS 10 and AOS-8 Web-Based Management Interface
Affected: 10.6.0.0 through 10.7.2.1; 10.3.0.0 through 10.4.1.9; 8.12.0.0 through 8.13.1.0; 8.10.0.0 through 8.10.0.20
CVE-2025-37173
7.2
0%
Jan 13
Improper Input Handling Vulnerability in Authenticated Configuration API Endpoint (AOS-10/AOS-8 Web UI)
Affected: 10.6.0.0 through 10.7.2.1; 10.3.0.0 through 10.4.1.9; 8.12.0.0 through 8.13.1.0; 8.10.0.0 through 8.10.0.20
CVE-2025-37172
7.2
1%
Jan 13
Authenticated Command Injection Vulnerabilities in AOS-8 Web-Based Management Interface
Affected: 8.12.0.0 through 8.13.1.0; 8.10.0.0 through 8.10.0.20
CVE-2025-37171
7.2
1%
Jan 13
Authenticated Command Injection Vulnerabilities in AOS-8 Web-Based Management Interface
Affected: 8.12.0.0 through 8.13.1.0; 8.10.0.0 through 8.10.0.20
CVE-2025-37170
7.2
1%
Jan 13
Authenticated Command Injection Vulnerabilities in AOS-8 Web-Based Management Interface
Affected: 8.12.0.0 through 8.13.1.0; 8.10.0.0 through 8.10.0.20
CVE-2025-37169
7.2
1%
Jan 13
Stack Overflow Vulnerability in AOS-10 Web-Based Management Interface
Affected: 10.6.0.0 through 10.7.2.1; 10.3.0.0 through 10.4.1.9
CVE-2026-95712
New
7.1
0%
Oct 22
Unauthenticated Adjacent Sensitive Information Disclosure and Denial-of-Service in AOS-8 via the PAPI Protocol
Affected: 8.13.0.0 through 8.13.3.0; 8.10.0.0 through 8.10.0.23
CVE-2026-95711
New
7.1
0%
Oct 22
Authentication Bypass Leading to Remote Code Execution in AOS-10 Web-Based Management Interface
Affected: 10.8.0.0 through 10.8.1.1; 10.7.0.0 through 10.7.2.6; 10.4.0.0 through 10.4.1.13
CVE-2026-95710
New
7.1
0%
Oct 22
Unauthenticated Adjacent Buffer Overflow Vulnerability leads to Denial-of-Service in AOS-10 or AOS-8
Affected: 10.8.0.0 through 10.8.1.1; 10.7.0.0 through 10.7.2.6; 10.4.0.0 through 10.4.1.13; 8.13.0.0 through 8.13.3.0; 8.10.0.0 through 8.10.0.23
CVE-2026-95713
New
7.0
0%
Oct 22
Unauthenticated Buffer Overflow Vulnerability leads to Denial-of-Service in AOS-8 Command Line Interface
Affected: 8.13.0.0 through 8.13.3.0; 8.10.0.0 through 8.10.0.23
Showing 44