HA
Product
HPE Aruba Networking Wireless Operating System (AOS)
27
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 25Medium 2Low 0
Watch
Add HPE Aruba Networking Wireless Operating System (AOS) to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-44871 | 8.8 | May 12 | Authenticated Command Injection Vulnerabilities in Command Line Interface (CLI) Service Accessed by PAPI Protocol of AOS-8 and AOS-10 Operating Systems Affected: 8.13.0.0 through 8.13.1.1; 8.12.0.0 through 8.12.0.6; 8.10.0.0 through 8.10.0.21; 10.7.0.0 through 10.7.2.2; 10.8.0.0; 10.4.0.0 through 10.4.1.10 |
| CVE-2026-44870 | 8.8 | May 12 | Authenticated Command Injection Vulnerabilities in Command Line Interface (CLI) Service Accessed by PAPI Protocol of AOS-8 and AOS-10 Operating Systems Affected: 8.13.0.0 through 8.13.1.1; 8.12.0.0 through 8.12.0.6; 8.10.0.0 through 8.10.0.21; 10.7.0.0 through 10.7.2.2; 10.8.0.0; 10.4.0.0 through 10.4.1.10 |
| CVE-2026-44869 | 8.8 | May 12 | Authenticated Command Injection Vulnerabilities in the Web-Based Management Interface of AOS-8 and AOS-10 Affected: 8.13.0.0 through 8.13.1.1; 8.12.0.0 through 8.12.0.6; 8.10.0.0 through 8.10.0.21; 10.7.0.0 through 10.7.2.2; 10.8.0.0; 10.4.0.0 through 10.4.1.10 |
| CVE-2026-44868 | 8.8 | May 12 | Authenticated Command Injection Vulnerabilities in the Web-Based Management Interface of AOS-8 and AOS-10 Affected: 8.13.0.0 through 8.13.1.1; 8.12.0.0 through 8.12.0.6; 8.10.0.0 through 8.10.0.21; 10.7.0.0 through 10.7.2.2; 10.8.0.0; 10.4.0.0 through 10.4.1.10 |
| CVE-2026-44867 | 8.8 | May 12 | Authenticated Command Injection Vulnerabilities in the Web-Based Management Interface of AOS-8 and AOS-10 Affected: 8.13.0.0 through 8.13.1.1; 8.12.0.0 through 8.12.0.6; 8.10.0.0 through 8.10.0.21; 10.7.0.0 through 10.7.2.2; 10.8.0.0; 10.4.0.0 through 10.4.1.10 |
| CVE-2026-44866 | 8.8 | May 12 | Authenticated Command Injection Vulnerabilities in the Web-Based Management Interface of AOS-8 and AOS-10 Affected: 8.13.0.0 through 8.13.1.1; 8.12.0.0 through 8.12.0.6; 8.10.0.0 through 8.10.0.21; 10.7.0.0 through 10.7.2.2; 10.8.0.0; 10.4.0.0 through 10.4.1.10 |
| CVE-2026-23827 | 7.5 | May 12 | Unauthenticated Remote Code Execution via Heap Buffer Overflow in Network Management Service Affected: 8.13.0.0 through 8.13.1.1; 8.12.0.0 through 8.12.0.6; 8.10.0.0 through 8.10.0.21; 10.8.0.0; 10.7.0.0 through 10.7.2.2; 10.4.0.0 through 10.4.1.10 |
| CVE-2026-23826 | 7.5 | May 12 | Unauthenticated Denial of Service in AOS-8 Network Management Service Affected: 8.13.0.0 through 8.13.1.1; 8.12.0.0 through 8.12.0.6; 8.10.0.0 through 8.10.0.21 |
| CVE-2026-23825 | 7.5 | May 12 | Unauthenticated Denial-of-Service via Crafted Messages in a Network Protocol Handling Component Affected: 10.8.0.0; 10.7.0.0 through 10.7.2.2; 10.4.0.0 through 10.4.1.10 |
| CVE-2026-23824 | 7.5 | May 12 | Unauthenticated Denial-of-Service via Crafted Messages in a Network Protocol Handling Component Affected: 10.8.0.0; 10.7.0.0 through 10.7.2.2; 10.4.0.0 through 10.4.1.10 |
| CVE-2026-44872 | 7.2 | May 12 | Authenticated Arbitrary File Upload via Command Injection in AOS-8 AND AOS-10 Web-Based Management Interface Affected: 8.13.0.0 through 8.13.1.1; 8.12.0.0 through 8.12.0.6; 8.10.0.0 through 8.10.0.21; 10.7.0.0 through 10.7.2.2; 10.8.0.0; 10.4.0.0 through 10.4.1.10 |
| CVE-2026-44865 | 7.2 | May 12 | Authenticated Command Injection Vulnerabilities in the Web-Based Management Interface of AOS-8 and AOS-10 Affected: 8.13.0.0 through 8.13.1.1; 8.12.0.0 through 8.12.0.6; 8.10.0.0 through 8.10.0.21; 10.7.0.0 through 10.7.2.2; 10.8.0.0; 10.4.0.0 through 10.4.1.10 |
| CVE-2026-44864 | 7.2 | May 12 | Authenticated Remote Code Execution via SQL Injection in AOS-8 and AOS-10 Operating Systems Affected: 8.13.0.0 through 8.13.1.1; 8.12.0.0 through 8.12.0.6; 8.10.0.0 through 8.10.0.21; 10.7.0.0 through 10.7.2.2; 10.8.0.0; 10.4.0.0 through 10.4.1.10 |
| CVE-2026-44863 | 7.2 | May 12 | Authenticated Remote Code Execution via SQL Injection in AOS-8 and AOS-10 Operating Systems Affected: 8.13.0.0 through 8.13.1.1; 8.12.0.0 through 8.12.0.6; 8.10.0.0 through 8.10.0.21; 10.7.0.0 through 10.7.2.2; 10.8.0.0; 10.4.0.0 through 10.4.1.10 |
| CVE-2026-44862 | 7.2 | May 12 | Authenticated Remote Code Execution via SQL Injection in AOS-8 and AOS-10 Operating Systems Affected: 8.13.0.0 through 8.13.1.1; 8.12.0.0 through 8.12.0.6; 8.10.0.0 through 8.10.0.21; 10.7.0.0 through 10.7.2.2; 10.8.0.0; 10.4.0.0 through 10.4.1.10 |
| CVE-2026-44861 | 7.2 | May 12 | Authenticated Remote Code Execution via SQL Injection in AOS-8 and AOS-10 Operating Systems Affected: 8.13.0.0 through 8.13.1.1; 8.12.0.0 through 8.12.0.6; 8.10.0.0 through 8.10.0.21; 10.7.0.0 through 10.7.2.2; 10.8.0.0; 10.4.0.0 through 10.4.1.10 |
| CVE-2026-44860 | 7.2 | May 12 | Authenticated Remote Code Execution via SQL Injection in AOS-8 and AOS-10 Operating Systems Affected: 8.13.0.0 through 8.13.1.1; 8.12.0.0 through 8.12.0.6; 8.10.0.0 through 8.10.0.21; 10.7.0.0 through 10.7.2.2; 10.8.0.0; 10.4.0.0 through 10.4.1.10 |
| CVE-2026-44859 | 7.2 | May 12 | Authenticated Stack-Based Buffer Overflow in PAPI Services Affected: 8.13.0.0 through 8.13.1.1; 8.12.0.0 through 8.12.0.6; 8.10.0.0 through 8.10.0.21; 10.7.0.0 through 10.7.2.2; 10.8.0.0; 10.4.0.0 through 10.4.1.10 |
| CVE-2026-44858 | 7.2 | May 12 | Authenticated Stack-Based Buffer Overflow in PAPI Services Affected: 8.13.0.0 through 8.13.1.1; 8.12.0.0 through 8.12.0.6; 8.10.0.0 through 8.10.0.21; 10.7.0.0 through 10.7.2.2; 10.8.0.0; 10.4.0.0 through 10.4.1.10 |
| CVE-2026-44857 | 7.2 | May 12 | Authenticated Stack-Based Buffer Overflow in PAPI Services Affected: 8.13.0.0 through 8.13.1.1; 8.12.0.0 through 8.12.0.6; 8.10.0.0 through 8.10.0.21; 10.7.0.0 through 10.7.2.2; 10.8.0.0; 10.4.0.0 through 10.4.1.10 |
| CVE-2026-44856 | 7.2 | May 12 | Authenticated Stack-Based Buffer Overflow in PAPI Services Affected: 8.13.0.0 through 8.13.1.1; 8.12.0.0 through 8.12.0.6; 8.10.0.0 through 8.10.0.21; 10.7.0.0 through 10.7.2.2; 10.8.0.0; 10.4.0.0 through 10.4.1.10 |
| CVE-2026-44855 | 7.2 | May 12 | Authenticated Stack-Based Buffer Overflow in PAPI Services Affected: 8.13.0.0 through 8.13.1.1; 8.12.0.0 through 8.12.0.6; 8.10.0.0 through 8.10.0.21; 10.7.0.0 through 10.7.2.2; 10.8.0.0; 10.4.0.0 through 10.4.1.10 |
| CVE-2026-44854 | 7.2 | May 12 | Authenticated Remote Code Execution via Arbitrary File Write in AOS-8 and AOS-10 Web-Based Management Interface Affected: 8.13.0.0 through 8.13.1.1; 8.12.0.0 through 8.12.0.6; 8.10.0.0 through 8.10.0.21; 10.8.0.0; 10.7.0.0 through 10.7.2.2; 10.4.0.0 through 10.4.1.10 |
| CVE-2026-44853 | 7.2 | May 12 | Authenticated Remote Code Execution via Arbitrary File Write in AOS-8 and AOS-10 Web-Based Management Interface Affected: 8.13.0.0 through 8.13.1.1; 8.12.0.0 through 8.12.0.6; 8.10.0.0 through 8.10.0.21; 10.8.0.0; 10.7.0.0 through 10.7.2.2; 10.4.0.0 through 10.4.1.10 |
| CVE-2026-44852 | 7.2 | May 12 | Authenticated Remote Code Execution via Arbitrary File Overwrite in the AOS-8 and AOS-10 Web-Based Management Interface Affected: 8.13.0.0 through 8.13.1.1; 8.12.0.0 through 8.12.0.6; 8.10.0.0 through 8.10.0.21; 10.8.0.0; 10.7.0.0 through 10.7.2.2; 10.4.0.0 through 10.4.1.10 |
| CVE-2026-44873 | 5.4 | May 12 | Insufficient Session Invalidation on User Account Deactivation in AOS-8 Operating System Affected: 8.13.0.0 through 8.13.1.1; 8.12.0.0 through 8.12.0.6; 8.10.0.0 through 8.10.0.21 |
| CVE-2026-44874 | 4.9 | May 12 | Authenticated Arbitrary File Download via AOS-10 Web-Based Management Interface Affected: 10.7.0.0 through 10.7.2.2; 10.8.0.0; 10.4.0.0 through 10.4.1.10 |
Showing 27