AR
Product
Arubaos-cx
57
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 37Medium 15Low 2
Watch
Add Arubaos-cx to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-73778 | 9.8 | Sep 1 | Credential Manager Vulnerability Allows Unauthorized Administrative Access Affected: through 10.10.1180; 10.13.0000 through 10.13.1180; 10.16.0000 through 10.16.1051; 10.17.0000 through 10.17.1021; 10.18.0001 |
| CVE-2026-73749 | 9.8 | Sep 1 | Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-CX Affected: before 10.10.1181; 10.13.0000 before 10.13.1190; 10.16.0000 before 10.16.1060; 10.17.0000 before 10.17.1030; 10.18.0001 |
| CVE-2026-23813 | 9.8 | Mar 11 | Authentication Bypass in Web Interface allows Unauthenticated Admin Password Reset Affected: before 10.10.1180; 10.13.0000 before 10.13.1161; 10.16.0000 before 10.16.1030; 10.17.0000 before 10.17.1001 |
| CVE-2026-73782 | 8.8 | Sep 1 | Unauthenticated Format String Vulnerability leads to Remote Code Execution in AOS-CX Affected: through 10.10.1180; 10.13.0000 through 10.13.1180; 10.16.0000 through 10.16.1051; 10.17.0000 through 10.17.1021; 10.18.0001 |
| CVE-2026-73763 | 8.8 | Sep 1 | Unauthenticated Remote Command Execution in Management Component Affected: through 10.10.1180; 10.13.0000 through 10.13.1180; 10.16.0000 through 10.16.1051; 10.17.0000 through 10.17.1021; 10.18.0001 |
| CVE-2026-73753 | 8.8 | Sep 1 | Authenticated Remote Command Injection Vulnerabilities in AOS-CX Command Line Interface Affected: before 10.10.1181; 10.13.0000 before 10.13.1190; 10.16.0000 before 10.16.1060; 10.17.0000 before 10.17.1030; 10.18.0001 |
| CVE-2026-73752 | 8.8 | Sep 1 | Unauthenticated Arbitrary File Write Vulnerability Leads to Remote Code Execution in AOS-CX Affected: before 10.10.1181; 10.13.0000 before 10.13.1190; 10.16.0000 before 10.16.1060; 10.17.0000 before 10.17.1030; 10.18.0001 |
| CVE-2026-73751 | 8.8 | Sep 1 | Authenticated Remote Command Injection in AOS-CX Web-based Management Interface Affected: before 10.10.1181; 10.13.0000 before 10.13.1190; 10.16.0000 before 10.16.1060; 10.17.0000 before 10.17.1030; 10.18.0001 |
| CVE-2026-73750 | 8.8 | Sep 1 | Authenticated Buffer Overflow Vulnerabilities in AOS-CX API Endpoint Leads to Possible Code Execution Affected: before 10.10.1181; 10.13.0000 before 10.13.1190; 10.16.0000 before 10.16.1060; 10.17.0000 before 10.17.1030; 10.18.0001 |
| CVE-2026-44880 | 8.8 | Jul 21 | Low-Privilege Authenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-CX Affected: through 10.13.1170; 10.16.0000 through 10.16.1050; 10.17.0000 through 10.17.1020; 10.18.0000 through 10.18.0001 |
| CVE-2026-23816 | 8.8 | Mar 11 | Authenticated Command Injection found in admin AOS-CX CLI command Affected: before 10.10.1180; 10.13.0000 before 10.13.1161; 10.16.0000 before 10.16.1030; 10.17.0000 before 10.17.1001 |
| CVE-2026-23814 | 8.8 | Mar 11 | Authenticated Command Injection found in AOS-CX CLI Command Affected: before 10.10.1180; 10.13.0000 before 10.13.1161; 10.16.0000 before 10.16.1030; 10.17.0000 before 10.17.1001 |
| CVE-2025-37158 | 8.8 | Nov 18 | A command injection vulnerability exists in the AOS-CX Operating System Affected: 10.10.0000 before 10.10.1170; 10.13.0000 before 10.13.1101; 10.14.0000 before 10.14.1060; 10.15.0000 before 10.15.1030; 10.16.0000 before 10.16.1001 |
| CVE-2025-37157 | 8.8 | Nov 18 | A command injection vulnerability exists in the AOS-CX Operating System Affected: 10.10.0000 before 10.10.1170; 10.13.0000 before 10.13.1101; 10.14.0000 before 10.14.1060; 10.15.0000 before 10.15.1030; 10.16.0000 before 10.16.1001 |
| CVE-2023-3718 | 8.8 | Aug 1 | An authenticated command injection vulnerability exists in the AOS-CX command line interface Affected: 10.10.0000 through 10.10.1050; 10.11.0000 through 10.11.1010 |
| CVE-2023-1168 | 8.8 | Mar 22 | An authenticated remote code execution vulnerability exists in the AOS-CX Network Analytics Engine Affected: 10.06.0000 before 10.06.0240; 10.08.0000 through 10.08.1070; 10.09.0000 through 10.09.1020; 10.10.0000 before 10.10.1030 |
| CVE-2021-41001 | 8.8 | Mar 2 | An authenticated remote code execution vulnerability was discovered in the AOS-CX Network Analytics Engine (NAE) in Aruba CX 6200F Switch Series, Aruba 6300 Switch Series, Aruba… Affected: 10.07.0001 through 10.07.0050; 10.08.0001 through 10.08.1030; 10.09.0001 through 10.09.0002 |
| CVE-2021-41000 | 8.8 | Mar 2 | Multiple authenticated remote code execution vulnerabilities were discovered in the AOS-CX command line interface in Aruba CX 6200F Switch Series, Aruba 6300 Switch Series, Aruba… Affected: 10.06.0001 through 10.06.0170; 10.07.0001 through 10.07.0020; 10.08.0001 |
| CVE-2026-73781 | 8.4 | Sep 1 | Authenticated Stored Cross-Site Scripting Vulnerability (XSS) in AOS-CX Web-Based Management Interface Affected: through 10.10.1180; 10.13.0000 through 10.13.1180; 10.16.0000 through 10.16.1051; 10.17.0000 through 10.17.1021; 10.18.0001 |
| CVE-2026-73780 | 8.3 | Sep 1 | Lack of Cross-Site Request Forgery (CSRF) Protections for Certificate-Authenticated Sessions in AOS-CX Affected: before 10.10.1181; 10.13.0000 before 10.13.1190; 10.16.0000 before 10.16.1060; 10.17.0000 before 10.17.1030; 10.18.0001 |
| CVE-2026-73779 | 8.2 | Sep 1 | Authentication Bypass Vulnerabilities Leading to Information Disclosure, Unauthorized Modification, and Service Disruption in AOS-CX Affected: through 10.10.1180; 10.13.0000 through 10.13.1180; 10.16.0000 through 10.16.1051; 10.17.0000 through 10.17.1021; 10.18.0001 |
| CVE-2026-73777 | 8.1 | Sep 1 | Authorization Bypass Vulnerabilities Leading to Privilege Escalation in AOS-CX API Endpoint Affected: through 10.10.1180; 10.13.0000 through 10.13.1180; 10.16.0000 through 10.16.1051; 10.17.0000 through 10.17.1021; 10.18.0001 |
| CVE-2021-41002 | 8.1 | Mar 2 | Multiple authenticated remote path traversal vulnerabilities were discovered in the AOS-CX command line interface in Aruba CX 6200F Switch Series, Aruba 6300 Switch Series, Aruba… Affected: 10.06.0001 through 10.06.0170; 10.07.0001 through 10.07.0050; 10.08.0001 through 10.08.1030; 10.09.0001 through 10.09.0002 |
| CVE-2026-73776 | 7.9 | Sep 1 | Authenticated Signature Verification Bypass Leading to Arbitrary Code Execution in AOS-CX Affected: through 10.10.1180; 10.13.0000 through 10.13.1180; 10.16.0000 through 10.16.1051; 10.17.0000 through 10.17.1021; 10.18.0001 |
| CVE-2025-37155 | 7.8 | Nov 18 | A vulnerability in the SSH restricted shell interface of the network management services allows improper access control for authenticated read-only users Affected: 10.10.0000 before 10.10.1170; 10.13.0000 before 10.13.1101; 10.14.0000 before 10.14.1060; 10.15.0000 before 10.15.1030; 10.16.0000 before 10.16.1001 |
| CVE-2026-73775 | 7.7 | Sep 1 | Authenticated Sensitive Information Disclosure Vulnerabilities in AOS-CX Affected: through 10.10.1180; 10.13.0000 through 10.13.1180; 10.16.0000 through 10.16.1051; 10.17.0000 through 10.17.1021; 10.18.0001 |
| CVE-2026-73774 | 7.6 | Sep 1 | Unauthenticated Buffer Overflow Vulnerability leads to Sensitive Information Disclosure in AOS-CX Affected: through 10.10.1180; 10.13.0000 through 10.13.1180; 10.16.0000 through 10.16.1051; 10.17.0000 through 10.17.1021; 10.18.0001 |
| CVE-2026-73773 | 7.5 | Sep 1 | Unauthenticated Denial-of-Service (DoS) Vulnerability in AOS-CX Affected: through 10.10.1180; 10.13.0000 through 10.13.1180; 10.16.0000 through 10.16.1051; 10.17.0000 through 10.17.1021; 10.18.0001 |
| CVE-2026-73771 | 7.5 | Sep 1 | Improper Authentication Handling in AOS-CX Management Interface and API Affected: through 10.10.1180; 10.13.0000 through 10.13.1180; 10.16.0000 through 10.16.1051; 10.17.0000 through 10.17.1021; 10.18.0001 |
| CVE-2002-20001 | 7.5 | Nov 11 | The Diffie-Hellman Key Agreement Protocol allows remote attackers (from the client side) to send arbitrary numbers that are actually not public keys, and trigger expensive… Affected: 10.06.0000 before 10.06.0180; 10.07.0000 before 10.07.0030; 10.08.0000 before 10.08.0010; 10.09.0000 before 10.09.0002 |
| CVE-2026-73770 | 7.3 | Sep 1 | Authenticated Arbitrary File Write Vulnerability Leading to Remote Code Execution in AOS-CX Affected: through 10.10.1180; 10.13.0000 through 10.13.1180; 10.16.0000 through 10.16.1051; 10.17.0000 through 10.17.1021; 10.18.0001 |
| CVE-2026-73768 | 7.3 | Sep 1 | Local Privilege Escalation in AOS-CX Command Line Interface Affected: through 10.10.1180; 10.13.0000 through 10.13.1180; 10.16.0000 through 10.16.1051; 10.17.0000 through 10.17.1021; 10.18.0001 |
| CVE-2025-37159 | 7.3 | Nov 18 | A vulnerability in the web management interface of the AOS-CX OS user authentication service could allow an authenticated remote attacker to hijack an active user session Affected: 10.10.0000 before 10.10.1170; 10.13.0000 before 10.13.1101; 10.14.0000 before 10.14.1060; 10.15.0000 before 10.15.1030; 10.16.0000 before 10.16.1001 |
| CVE-2026-73767 | 7.2 | Sep 1 | Authenticated Remote Command Injection Vulnerabilities in AOS-CX Command Line Interface Affected: through 10.10.1180; 10.13.0000 through 10.13.1180; 10.16.0000 through 10.16.1051; 10.17.0000 through 10.17.1021; 10.18.0001 |
| CVE-2026-73766 | 7.2 | Sep 1 | Authenticated Command Injection Vulnerabilities in the API Endpoint of AOS-CX Affected: through 10.10.1180; 10.13.0000 through 10.13.1180; 10.16.0000 through 10.16.1051; 10.17.0000 through 10.17.1021; 10.18.0001 |
| CVE-2026-73765 | 7.2 | Sep 1 | Authenticated Path Traversal Vulnerabilities Lead to Remote Code Execution in AOS-CX Affected: through 10.10.1180; 10.13.0000 through 10.13.1180; 10.16.0000 through 10.16.1051; 10.17.0000 through 10.17.1021; 10.18.0001 |
| CVE-2026-63454 | 7.2 | Jul 21 | Authenticated Path Traversal Vulnerability Leads to Remote Code Execution in AOS-CX Affected: through 10.13.1170; 10.16.0000 through 10.16.1050; 10.17.0000 through 10.17.1020; 10.18.0000 through 10.18.0001 |
| CVE-2026-63453 | 7.2 | Jul 21 | Authenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-CX Affected: through 10.13.1170; 10.16.0000 through 10.16.1050; 10.17.0000 through 10.17.1020; 10.18.0000 through 10.18.0001 |
| CVE-2026-23815 | 7.2 | Mar 11 | Authenticated Command Injection found in AOS-CX Administrative CLI Command Affected: before 10.10.1180; 10.13.0000 before 10.13.1161; 10.16.0000 before 10.16.1030; 10.17.0000 before 10.17.1001 |
| CVE-2026-73764 | 7.1 | Sep 1 | Authentication Bypass Vulnerabilities Leading to Unauthorized Modification and Service Disruption in AOS-CX Affected: through 10.10.1180; 10.13.0000 through 10.13.1180; 10.16.0000 through 10.16.1051; 10.17.0000 through 10.17.1021; 10.18.0001 |
| CVE-2025-37156 | 6.8 | Nov 18 | A platform-level denial-of-service (DoS) vulnerability exists in ArubaOS-CX software Affected: 10.10.0000 before 10.10.1170; 10.13.0000 before 10.13.1101; 10.14.0000 before 10.14.1060; 10.15.0000 before 10.15.1030; 10.16.0000 before 10.16.1001 |
| CVE-2026-73762 | 6.6 | Sep 1 | Authorization Bypass in the API Endpoint of AOS-CX Leads to Unauthorized Access Affected: through 10.10.1180; 10.13.0000 through 10.13.1180; 10.16.0000 through 10.16.1051; 10.17.0000 through 10.17.1021; 10.18.0001 |
| CVE-2026-73772 | 6.5 | Sep 1 | Unauthenticated Buffer Overflow Vulnerabilities lead to Denial-of-Service in AOS-CX Affected: through 10.10.1180; 10.13.0000 through 10.13.1180; 10.16.0000 through 10.16.1051; 10.17.0000 through 10.17.1021; 10.18.0001 |
| CVE-2026-73761 | 6.5 | Sep 1 | Unauthenticated Out-of-Bounds Read Vulnerability leads to Information Disclosure in AOS-CX Affected: through 10.10.1180; 10.13.0000 through 10.13.1180; 10.16.0000 through 10.16.1051; 10.17.0000 through 10.17.1021; 10.18.0001 |
| CVE-2026-73760 | 6.5 | Sep 1 | Authenticated Path Traversal Vulnerability Leads to Remote Unauthorized Access to Files in AOS-CX Affected: through 10.10.1180; 10.13.0000 through 10.13.1180; 10.16.0000 through 10.16.1051; 10.17.0000 through 10.17.1021; 10.18.0001 |
| CVE-2026-73759 | 6.5 | Sep 1 | Unauthenticated Denial-of-Service Vulnerabilities in AOS-CX Affected: before 10.10.1181; 10.13.0000 before 10.13.1190; 10.16.0000 before 10.16.1060; 10.17.0000 before 10.17.1030; 10.18.0001 |
| CVE-2026-73758 | 6.5 | Sep 1 | Authenticated Privilege Escalation Vulnerability via Broken Access Control in AOS-CX Affected: through 10.10.1180; 10.13.0000 through 10.13.1180; 10.16.0000 through 10.16.1051; 10.17.0000 through 10.17.1021; 10.18.0001 |
| CVE-2025-37160 | 6.5 | Nov 18 | A broken access control (BAC) vulnerability in the web-based management interface could allow an authenticated remote attacker with low privileges to view sensitive information Affected: 10.10.0000 before 10.10.1170; 10.13.0000 before 10.13.1101; 10.14.0000 before 10.14.1060; 10.15.0000 before 10.15.1030; 10.16.0000 before 10.16.1001 |
| CVE-2026-73757 | 6.4 | Sep 1 | Authenticated Server-Side Request Forgery (SSRF) Leading to Information Disclosure in AOS-CX Affected: through 10.10.1180; 10.13.0000 through 10.13.1180; 10.16.0000 through 10.16.1051; 10.17.0000 through 10.17.1021; 10.18.0001 |
| CVE-2026-23817 | 6.1 | Mar 11 | Unauthenticated Open Redirect allows URL Manipulation in Web Interface Affected: 10.06.0000 before 10.10.1180; 10.13.0000 before 10.13.1161; 10.16.0000 before 10.16.1030; 10.17.0000 before 10.17.1001 |
