Veille CVE

Recherche « Hewlett Packard Enterprise (HPE) ArubaOS (AOS) »

103 CVE

Critique 32 Élevée 60 Moyenne 10 Faible 1 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Hewlett Packard Enterprise (HPE) ArubaOS (AOS) » ✕
  1. CVE-2026-95721 3.3 Faible

    Hewlett Packard Enterprise (HPE) ArubaOS (AOS)

    A memory corruption vulnerability exists in the web-based management interface of AOS-8. Successful exploitation could allow an authenticated low privilege attacker with local access to view some system files and interrupt the normal operation of the affected service.

  2. CVE-2026-95720 4.4 Moyenne

    Hewlett Packard Enterprise (HPE) ArubaOS (AOS)

    A buffer overflow vulnerability exists in AOS-8 that could allow an authenticated attacker with administrative access to cause denial of service. Successful exploitation could allow an attacker to crash the system, preventing it from rebooting without manual intervention and disrupting network operations.

  3. CVE-2026-95719 4.9 Moyenne

    Hewlett Packard Enterprise (HPE) ArubaOS (AOS)

    An arbitrary file deletion vulnerability exists in the command line interface of AOS-10 that could allow an authenticated attacker with administrative privileges to cause a denial of service. Successful exploitation could allow an attacker to crash the system, preventing it from rebooting without manual intervention and disrupting normal operation of the affected device.

  4. CVE-2026-95718 5.3 Moyenne

    Hewlett Packard Enterprise (HPE) ArubaOS (AOS)

    An authentication bypass vulnerability in the PAPI protocol of AOS-8 could allow an unauthenticated remote attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to make limited unauthorized modifications to certain settings of the affected system.

  5. CVE-2026-95717 5.5 Moyenne

    Hewlett Packard Enterprise (HPE) ArubaOS (AOS)

    A stored cross-site scripting (XSS) vulnerability exists in the web-based management interface of AOS that could allow an authenticated remote attacker with high privileges to inject malicious scripts. Successful exploitation could allow an attacker to execute arbitrary script code in the context of another authenticated user's browser session.

  6. CVE-2026-95716 6.5 Moyenne

    Hewlett Packard Enterprise (HPE) ArubaOS (AOS)

    An authentication bypass in the PAPI protocol of AOS-10 allows an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation allows an attacker to change the state of certain settings of a vulnerable system.

  7. CVE-2026-95715 6.8 Moyenne

    Hewlett Packard Enterprise (HPE) ArubaOS (AOS)

    An unauthenticated command injection vulnerability exists in the command line interface of AOS-10. Successful exploitation could allow an attacker with physical access to execute arbitrary commands as a privileged user on the underlying operating system leading to complete system compromise.

  8. CVE-2026-95714 6.8 Moyenne

    Hewlett Packard Enterprise (HPE) ArubaOS (AOS)

    A buffer overflow vulnerability exists in the API of AOS-10 that could allow an authenticated adjacent attacker with high privileges to achieve remote code execution. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system.

  9. CVE-2026-95713 7.0 Élevée

    Hewlett Packard Enterprise (HPE) ArubaOS (AOS)

    An unauthenticated buffer overflow vulnerability exists in the command line interface of AOS-8. Successful exploitation could allow an unauthenticated remote attacker to disrupt the availability of the affected interface, along with limited access to or modification of some system data.

  10. CVE-2026-95712 7.1 Élevée

    Hewlett Packard Enterprise (HPE) ArubaOS (AOS)

    A sensitive information disclosure vulnerability in the PAPI protocol of AOS-8 could allow an unauthenticated adjacent attacker to access limited information handled by the affected service. Successful exploitation could allow an attacker to view some information and to disrupt the availability of the affected service.

  11. CVE-2026-95711 7.1 Élevée

    Hewlett Packard Enterprise (HPE) ArubaOS (AOS)

    An authentication bypass vulnerability in the web-based management interface of AOS-10 could allow an unauthenticated adjacent attacker to circumvent existing authentication controls and run arbitrary commands on the underlying host if certain preconditions outside of the attacker's control are met. Successful exploitation of this vulnerability could allow an attacker to execute arbitrary commands on the underlying operating system.

  12. CVE-2026-95710 7.1 Élevée

    Hewlett Packard Enterprise (HPE) ArubaOS (AOS)

    An unauthenticated buffer overflow vulnerability exists in the underlying operating system of AOS-10 or AOS-8 and could allow an unauthenticated adjacent attacker to conduct a denial of service attack. Successful exploitation could allow an attacker to disrupt the availability of the affected system, with a limited impact to the integrity of the affected component.

  13. CVE-2026-95709 7.2 Élevée

    Hewlett Packard Enterprise (HPE) ArubaOS (AOS)

    Command injection vulnerabilities exist in the affected interface of AOS-10 that could allow an authenticated remote attacker with high privileges to perform command injection. Successful exploitation could allow an attacker to execute arbitrary commands as a privileged user on the underlying operating system.

  14. CVE-2026-95708 7.2 Élevée

    Hewlett Packard Enterprise (HPE) ArubaOS (AOS)

    Command injection vulnerabilities exist in the affected interface of AOS-10 that could allow an authenticated remote attacker with high privileges to perform command injection. Successful exploitation could allow an attacker to execute arbitrary commands as a privileged user on the underlying operating system.

  15. CVE-2026-95707 7.2 Élevée

    Hewlett Packard Enterprise (HPE) ArubaOS (AOS)

    A buffer overflow vulnerability in the PAPI protocol of AOS-8 could allow an authenticated remote attacker with high privileges to achieve remote code execution. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system.

  16. CVE-2026-95706 7.2 Élevée

    Hewlett Packard Enterprise (HPE) ArubaOS (AOS)

    Command injection vulnerabilities in the affected interface of AOS-8 could allow an authenticated remote attacker with high privileges to perform command injection. Successful exploitation could allow an attacker to execute commands with the privileges of the impacted mechanism on the underlying operating system.

  17. CVE-2026-95705 7.2 Élevée

    Hewlett Packard Enterprise (HPE) ArubaOS (AOS)

    Command injection vulnerabilities in the affected interface of AOS-8 could allow an authenticated remote attacker with high privileges to perform command injection. Successful exploitation could allow an attacker to execute commands with the privileges of the impacted mechanism on the underlying operating system.

  18. CVE-2026-95704 7.2 Élevée

    Hewlett Packard Enterprise (HPE) ArubaOS (AOS)

    A vulnerability in the web-based management interface of wireless network management systems could allow an authenticated remote attacker to execute remote code. Successful exploitation could enable an attacker to execute arbitrary commands on the underlying operating system, potentially compromising system integrity and data security.

  19. CVE-2026-79956 7.2 Élevée

    Hewlett Packard Enterprise (HPE) ArubaOS (AOS)

    A vulnerability in the CLI command handling of the AOS-8 web interface could allow an authenticated remote attacker to execute arbitrary commands on the underlying operating system. Successful exploitation could allow an attacker to run unauthorized commands on the system, potentially leading to system compromise.

  20. CVE-2026-79955 7.5 Élevée

    Hewlett Packard Enterprise (HPE) ArubaOS (AOS)

    An unauthenticated memory corruption vulnerability exists in a service accessed via the PAPI protocol in AOS-8 that could allow an unauthenticated remote attacker to conduct a denial of service attack. Successful exploitation could allow an attacker to disrupt the availability of the affected service.

  21. CVE-2026-79895 7.5 Élevée

    Hewlett Packard Enterprise (HPE) ArubaOS (AOS)

    Vulnerabilities in the affected interface of AOS-10 could allow an unauthenticated remote attacker to conduct a denial of service attack. Successful exploitation could allow an attacker to disrupt the availability of the affected interface.

  22. CVE-2026-79894 7.5 Élevée

    Hewlett Packard Enterprise (HPE) ArubaOS (AOS)

    An unauthenticated Denial-of-Service (DoS) vulnerability exists in the PAPI protocol of AOS-8. Successful exploitation of this vulnerability results in the ability to disrupt the availability of the affected interface.

  23. CVE-2026-79893 7.5 Élevée

    Hewlett Packard Enterprise (HPE) ArubaOS (AOS)

    Memory corruption vulnerabilities in AOS-10 could allow an unauthenticated remote attacker to conduct a denial of service attack. Successful exploitation could allow an attacker to disrupt the availability of the affected service.

  24. CVE-2026-79892 7.8 Élevée

    Hewlett Packard Enterprise (HPE) ArubaOS (AOS)

    A memory corruption vulnerability exists in AOS-8 that could allow an authenticated local attacker to execute arbitrary code. Successful exploitation could allow the attacker to execute arbitrary code as a privileged user on the underlying operating system.

  25. CVE-2026-79891 8.1 Élevée

    Hewlett Packard Enterprise (HPE) ArubaOS (AOS)

    A buffer overflow vulnerability exists in the command line interface of AOS-8 that could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system leading to complete system compromise.

  26. CVE-2026-79890 8.1 Élevée

    Hewlett Packard Enterprise (HPE) ArubaOS (AOS)

    There are command injection vulnerabilities in AOS-8 that could lead to unauthenticated remote code execution by sending specially crafted PAPI packets. Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system.

  27. CVE-2026-79889 8.1 Élevée

    Hewlett Packard Enterprise (HPE) ArubaOS (AOS)

    Vulnerabilities in multiple web interface endpoints of AOS-8 devices could allow an unauthenticated remote attacker to trigger a buffer overflow by using specially crafted requests. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system, leading to complete system compromise.

  28. CVE-2026-79888 8.1 Élevée

    Hewlett Packard Enterprise (HPE) ArubaOS (AOS)

    A vulnerability in a certain web interface endpoint of AOS-8 devices could allow an unauthenticated remote attacker to trigger a buffer overflow. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system, leading to complete system compromise.

  29. CVE-2026-79887 8.1 Élevée

    Hewlett Packard Enterprise (HPE) ArubaOS (AOS)

    A vulnerability in the web interface of AOS-8 could allow an unauthenticated remote attacker to achieve remote code execution. Successful exploitation could lead to complete device control, enabling interception of network traffic and potential compromise of connected systems.

  30. CVE-2026-79886 8.2 Élevée

    Hewlett Packard Enterprise (HPE) ArubaOS (AOS)

    An unauthenticated buffer overflow vulnerability exists in the PAPI protocol of AOS-8. Successful exploitation could allow an unauthenticated remote attacker to disrupt the availability of the affected service on the controller, with a limited impact to its integrity.

  31. CVE-2026-79885 8.2 Élevée

    Hewlett Packard Enterprise (HPE) ArubaOS (AOS)

    An unauthenticated file write vulnerability exists in the PAPI protocol in AOS-8. Successful exploitation could allow an unauthenticated remote attacker to make limited modifications to files on the affected system and to disrupt the availability of the affected service.

  32. CVE-2026-79884 8.2 Élevée

    Hewlett Packard Enterprise (HPE) ArubaOS (AOS)

    A vulnerability in the web-based management interface of AOS-8 could allow an unauthenticated adjacent attacker to bypass existing authentication controls and access sensitive information. Successful exploitation could allow an attacker to gain access to some data in a cleartext format possibly exposing other network infrastructure to further compromise.

  33. CVE-2026-79883 8.3 Élevée

    Hewlett Packard Enterprise (HPE) ArubaOS (AOS)

    A buffer overflow vulnerability in the PAPI protocol of HPE Networking AOS-10 could allow an unauthenticated adjacent attacker to access sensitive information. Successful exploitation could allow an attacker to retrieve information which could be used to potentially gain further access to network services supported by AOS-10, and to interrupt the normal operation of the affected service.

  34. CVE-2026-79882 8.3 Élevée

    Hewlett Packard Enterprise (HPE) ArubaOS (AOS)

    There is a command injection vulnerability in the PAPI protocol of AOS-10 that could lead to unauthenticated remote code execution by an adjacent attacker sending specially crafted packets. Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system.

  35. CVE-2026-79881 8.3 Élevée

    Hewlett Packard Enterprise (HPE) ArubaOS (AOS)

    An authentication bypass vulnerability in the underlying operating system of AOS-8 could allow an unauthenticated remote attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system leading to complete system compromise.

  36. CVE-2026-79880 8.7 Élevée

    Hewlett Packard Enterprise (HPE) ArubaOS (AOS)

    A vulnerability in the command line interface of AOS-8 could allow an authenticated remote attacker with high privileges to conduct a server-side request forgery (SSRF) attack. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.

  37. CVE-2026-79879 8.8 Élevée

    Hewlett Packard Enterprise (HPE) ArubaOS (AOS)

    Memory corruption vulnerabilities in the affected interface of AOS-10 could lead to remote code execution by an unauthenticated adjacent attacker. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system.

  38. CVE-2026-79878 8.8 Élevée

    Hewlett Packard Enterprise (HPE) ArubaOS (AOS)

    A command injection vulnerability in the AOS-8 command line interface accessed by the PAPI protocol could lead to unauthenticated remote code execution by an adjacent attacker sending specially crafted PAPI packets destined to the PAPI UDP port 8211. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system.

  39. CVE-2026-79877 8.8 Élevée

    Hewlett Packard Enterprise (HPE) ArubaOS (AOS)

    A remote code execution vulnerability in the underlying operating system of AOS-10 could allow an unauthenticated adjacent attacker to execute arbitrary code on an affected device. Successful exploitation could allow an attacker to execute arbitrary commands as a privileged user on the underlying operating system leading to complete system compromise.

  40. CVE-2026-79876 9.3 Critique

    Hewlett Packard Enterprise (HPE) ArubaOS (AOS)

    A sensitive information disclosure vulnerability in the Wi-Fi frame processing of AOS-10 could allow an unauthenticated adjacent attacker to access sensitive information. Successful exploitation could allow an attacker to retrieve information which could be used to potentially gain further access to network services supported by AOS-10, or to interrupt the normal operation of the affected service.

  41. CVE-2026-79875 9.3 Critique

    Hewlett Packard Enterprise (HPE) ArubaOS (AOS)

    A vulnerability has been identified in the PAPI protocol of AOS-8 that could potentially allow an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative access, modify system configurations, and access or manipulate sensitive data.

  42. CVE-2026-79874 9.3 Critique

    Hewlett Packard Enterprise (HPE) ArubaOS (AOS)

    An authentication bypass in the API of AOS-10 allows an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative access, modify system configurations, and access or manipulate sensitive data.

  43. CVE-2026-79873 9.3 Critique

    Hewlett Packard Enterprise (HPE) ArubaOS (AOS)

    Authentication bypass vulnerabilities in the PAPI protocol of AOS-10 could allow an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative access, modify system configurations, and access or manipulate sensitive data on affected devices.

  44. CVE-2026-79872 9.4 Critique

    Hewlett Packard Enterprise (HPE) ArubaOS (AOS)

    A buffer overflow vulnerability exists in the underlying operating system of AOS that could lead to unauthenticated remote code execution by an unauthenticated remote attacker. Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system.

  45. CVE-2026-79871 9.6 Critique

    Hewlett Packard Enterprise (HPE) ArubaOS (AOS)

    A sensitive information disclosure vulnerability in the command line interface of AOS-10 could allow an unauthenticated remote attacker to access sensitive information. Successful exploitation could allow an attacker to retrieve information which could be used to potentially gain further access to network services supported by AOS-10.

  46. CVE-2026-79870 9.6 Critique

    Hewlett Packard Enterprise (HPE) ArubaOS (AOS)

    An authentication bypass vulnerability in the PAPI protocol of AOS-8 could allow an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative access, modify system configurations, access or manipulate sensitive data, and disrupt network operations.

  47. CVE-2026-79869 9.6 Critique

    Hewlett Packard Enterprise (HPE) ArubaOS (AOS)

    Authentication bypass vulnerabilities in the affected interface of AOS-10 could allow an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to execute arbitrary commands as a privileged user on the underlying operating system.

  48. CVE-2026-79868 9.6 Critique

    Hewlett Packard Enterprise (HPE) ArubaOS (AOS)

    Authentication bypass vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative access, modify system configurations, and access or manipulate sensitive data, leading to complete compromise of the affected system.

  49. CVE-2026-79867 9.6 Critique

    Hewlett Packard Enterprise (HPE) ArubaOS (AOS)

    Authentication bypass vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated adjacent attacker to circumvent existing authentication controls and run arbitrary commands on the underlying host. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system leading to complete system compromise.

  50. CVE-2026-79866 9.6 Critique

    Hewlett Packard Enterprise (HPE) ArubaOS (AOS)

    An unauthenticated path traversal vulnerability exists in the PAPI protocol in AOS-8. Successful exploitation of this vulnerability could allow an unauthenticated adjacent attacker to read, modify, and delete files on the underlying operating system.

  51. CVE-2026-79865 9.6 Critique

    Hewlett Packard Enterprise (HPE) ArubaOS (AOS)

    A memory corruption vulnerability in the affected interface of AOS-10 could allow an unauthenticated adjacent attacker to achieve remote code execution. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system.

  52. CVE-2026-79864 9.6 Critique

    Hewlett Packard Enterprise (HPE) ArubaOS (AOS)

    Command injection vulnerabilities exist in the affected interface of AOS-10 that could allow an unauthenticated adjacent attacker to perform command injection. Successful exploitation could allow an attacker to execute arbitrary commands as a privileged user on the underlying operating system.

  53. CVE-2026-79863 9.6 Critique

    Hewlett Packard Enterprise (HPE) ArubaOS (AOS)

    Buffer overflow vulnerabilities in the affected interface of AOS-10 or AOS-8 could allow an unauthenticated adjacent attacker to execute arbitrary code by sending specially crafted data to the affected interface. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system.

  54. CVE-2026-79862 9.6 Critique

    Hewlett Packard Enterprise (HPE) ArubaOS (AOS)

    Buffer overflow vulnerabilities in the affected interface of AOS-10 or AOS-8 could allow an unauthenticated adjacent attacker to execute arbitrary code by sending specially crafted data to the affected interface. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system.

  55. CVE-2026-79861 9.8 Critique

    Hewlett Packard Enterprise (HPE) ArubaOS (AOS)

    There is a command injection vulnerability in AOS-10 that could lead to unauthenticated remote code execution by sending specially crafted PAPI packets. Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system.

  56. CVE-2026-79860 9.8 Critique

    Hewlett Packard Enterprise (HPE) ArubaOS (AOS)

    Buffer overflow vulnerabilities exist in an underlying service of AOS-8 that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management protocol) UDP port 8211. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system.

  57. CVE-2026-79859 9.8 Critique

    Hewlett Packard Enterprise (HPE) ArubaOS (AOS)

    Buffer overflow vulnerabilities exist in the affected interface of AOS-8 that could lead to unauthenticated remote code execution. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system.

  58. CVE-2026-79858 9.8 Critique

    Hewlett Packard Enterprise (HPE) ArubaOS (AOS)

    An unauthenticated SQL injection vulnerability exists in the PAPI protocol in AOS-8. Successful exploitation could allow an unauthenticated remote attacker to obtain and modify sensitive information in the underlying database and to interrupt the normal operation of the affected service.

  59. CVE-2026-79857 9.8 Critique

    Hewlett Packard Enterprise (HPE) ArubaOS (AOS)

    There is a command injection vulnerability in the PAPI protocol (Aruba's access point management protocol) of AOS-8 that could lead to unauthenticated remote code execution by sending specially crafted packets to the affected UDP port. Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system.

  60. CVE-2026-79856 9.8 Critique

    Hewlett Packard Enterprise (HPE) ArubaOS (AOS)

    A buffer overflow vulnerability exists in the PAPI protocol of AOS-8 that could allow an unauthenticated remote attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative access, modify system configurations, and access or manipulate sensitive data.

  61. CVE-2026-79855 9.8 Critique

    Hewlett Packard Enterprise (HPE) ArubaOS (AOS)

    An authentication bypass vulnerability in the SSH daemon of AOS-8 allows an unauthenticated remote attacker to circumvent existing authentication controls. Successful exploitation allows an attacker to gain administrative privileges leading to complete compromise of the AOS-8 host.

  62. CVE-2026-79854 9.8 Critique

    Hewlett Packard Enterprise (HPE) ArubaOS (AOS)

    A vulnerability in the affected interface of AOS-10 could allow an unauthenticated remote attacker to conduct SQL injection attacks against the AOS-10 instance. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.

  63. CVE-2026-79853 9.8 Critique

    Hewlett Packard Enterprise (HPE) ArubaOS (AOS)

    Sensitive information disclosure vulnerabilities in the affected interface of AOS-10 could allow an unauthenticated remote attacker to obtain sensitive information from the affected system. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.

  64. CVE-2026-79852 9.8 Critique

    Hewlett Packard Enterprise (HPE) ArubaOS (AOS)

    A vulnerability in the web-based management interface of AOS could allow an unauthenticated remote attacker to conduct SQL injection attacks against the AOS instance. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.

  65. CVE-2026-79851 10.0 Critique

    Hewlett Packard Enterprise (HPE) ArubaOS (AOS)

    Buffer overflow vulnerabilities exist in the affected interface of AOS-10 that could lead to unauthenticated remote code execution. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system, leading to complete system compromise.

  66. CVE-2026-79850 10.0 Critique

    Hewlett Packard Enterprise (HPE) ArubaOS (AOS)

    Vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated remote attacker to bypass existing authentication controls and run arbitrary commands on the underlying host. Successful exploitation could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete system compromise.

  67. CVE-2026-79849 10.0 Critique

    Hewlett Packard Enterprise (HPE) ArubaOS (AOS)

    Vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated remote attacker to conduct SQL injection attacks against an affected AOS-8 instance. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.

  68. CVE-2026-79848 10.0 Critique

    Hewlett Packard Enterprise (HPE) ArubaOS (AOS)

    Vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated remote attacker to conduct SQL injection attacks against an affected AOS-8 instance. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.

  69. CVE-2026-79847 10.0 Critique

    Hewlett Packard Enterprise (HPE) ArubaOS (AOS)

    Buffer overflow vulnerabilities in the affected interface of AOS-10 could lead to unauthenticated remote code execution by sending specially crafted packets to the affected interface. Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system.

  70. CVE-2026-79846 10.0 Critique

    Hewlett Packard Enterprise (HPE) ArubaOS (AOS)

    Command injection vulnerabilities exist in the affected interface of AOS-8 that could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.

  71. CVE-2026-79844 10.0 Critique

    Hewlett Packard Enterprise (HPE) ArubaOS (AOS)

    Authentication bypass vulnerabilities in the affected interface of AOS-10 could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.

  72. CVE-2026-44871 8.8 Élevée

    Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS) · Arubanetworks arubaos · Arubanetworks sd-wan

    Command injection vulnerabilities exist in the command line interface (CLI) service accessed by the PAPI protocol of AOS-8 and AOS-10 Operating Systems. Successful exploitation of these vulnerabilities could allow an authenticated remote attacker to execute arbitrary commands on the underlying operating system.

  73. CVE-2026-44874 4.9 Moyenne

    Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS) · Arubanetworks arubaos

    A vulnerability exists in the web-based management interface of an AOS-10 Gateway that could allow an authenticated remote attacker to access sensitive files on the underlying operating system. Successful exploitation of this vulnerability could result in the disclosure of confidential system information, potentially enabling further attacks against the affected device.

  74. CVE-2026-44873 5.4 Moyenne

    Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS) · Arubanetworks arubaos · Arubanetworks sd-wan

    A session management vulnerability in AOS-8 allows previously authenticated users to retain network access after their accounts are administratively disabled. Existing sessions are not invalidated when credentials are revoked, enabling continued access until session expiration. An attacker with compromised credentials could exploit this behavior to maintain unauthorized access even after the account has been disabled.

  75. CVE-2026-44872 7.2 Élevée

    Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS) · Arubanetworks arubaos · Arubanetworks sd-wan

    A command injection vulnerability exists in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Successful exploitation could allow an authenticated remote attacker to place arbitrary files on the underlying filesystem of the affected device.

  76. CVE-2026-44870 8.8 Élevée

    Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS) · Arubanetworks arubaos · Arubanetworks sd-wan

    Command injection vulnerabilities exist in the command line interface (CLI) service accessed by the PAPI protocol of AOS-8 and AOS-10 Operating Systems. Successful exploitation of these vulnerabilities could allow an authenticated remote attacker to execute arbitrary commands on the underlying operating system.

  77. CVE-2026-44869 8.8 Élevée

    Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS) · Arubanetworks arubaos · Arubanetworks sd-wan

    Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Successful exploitation of these vulnerabilities could allow an authenticated remote attacker to execute arbitrary commands on the underlying operating system.

  78. CVE-2026-44868 8.8 Élevée

    Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS) · Arubanetworks arubaos · Arubanetworks sd-wan

    Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Successful exploitation of these vulnerabilities could allow an authenticated remote attacker to execute arbitrary commands on the underlying operating system.

  79. CVE-2026-44867 8.8 Élevée

    Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS) · Arubanetworks arubaos · Arubanetworks sd-wan

    Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Successful exploitation of these vulnerabilities could allow an authenticated remote attacker to execute arbitrary commands on the underlying operating system.

  80. CVE-2026-44866 8.8 Élevée

    Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS) · Arubanetworks arubaos · Arubanetworks sd-wan

    Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Successful exploitation of these vulnerabilities could allow an authenticated remote attacker to execute arbitrary commands on the underlying operating system.

  81. CVE-2026-44865 7.2 Élevée

    Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS) · Arubanetworks arubaos · Arubanetworks sd-wan

    Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Successful exploitation of these vulnerabilities could allow an authenticated remote attacker to execute arbitrary commands on the underlying operating system.

  82. CVE-2026-44864 7.2 Élevée

    Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS) · Arubanetworks arubaos · Arubanetworks sd-wan

    SQL injection vulnerabilities exist in several underlying service components accessible through the AOS-8 and AOS-10 command-line interface and management protocol. An authenticated attacker with administrative privileges could exploit these vulnerabilities by injecting crafted input into parameters that are passed unsanitized to backend database queries. Successful exploitation could allow the attacker to execute arbitrary commands on the underlying operating system.

  83. CVE-2026-44863 7.2 Élevée

    Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS) · Arubanetworks arubaos · Arubanetworks sd-wan

    SQL injection vulnerabilities exist in several underlying service components accessible through the AOS-8 and AOS-10 command-line interface and management protocol. An authenticated attacker with administrative privileges could exploit these vulnerabilities by injecting crafted input into parameters that are passed unsanitized to backend database queries. Successful exploitation could allow the attacker to execute arbitrary commands on the underlying operating system.

  84. CVE-2026-44862 7.2 Élevée

    Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS) · Arubanetworks arubaos · Arubanetworks sd-wan

    SQL injection vulnerabilities exist in several underlying service components accessible through the AOS-8 and AOS-10 command-line interface and management protocol. An authenticated attacker with administrative privileges could exploit these vulnerabilities by injecting crafted input into parameters that are passed unsanitized to backend database queries. Successful exploitation could allow the attacker to execute arbitrary commands on the underlying operating system.

  85. CVE-2026-44861 7.2 Élevée

    Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS) · Arubanetworks arubaos · Arubanetworks sd-wan

    SQL injection vulnerabilities exist in several underlying service components accessible through the AOS-8 and AOS-10 command-line interface and management protocol. An authenticated attacker with administrative privileges could exploit these vulnerabilities by injecting crafted input into parameters that are passed unsanitized to backend database queries. Successful exploitation could allow the attacker to execute arbitrary commands on the underlying operating system.

  86. CVE-2026-44860 7.2 Élevée

    Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS) · Arubanetworks arubaos · Arubanetworks sd-wan

    SQL injection vulnerabilities exist in several underlying service components accessible through the AOS-8 and AOS-10 command-line interface and management protocol. An authenticated attacker with administrative privileges could exploit these vulnerabilities by injecting crafted input into parameters that are passed unsanitized to backend database queries. Successful exploitation could allow the attacker to execute arbitrary commands on the underlying operating system.

  87. CVE-2026-44859 7.2 Élevée

    Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS) · Arubanetworks arubaos · Arubanetworks sd-wan

    Stack-based buffer overflow vulnerabilities exist in several underlying management service components accessed through the command-line interface of the AOS-8 and AOS-10 Operating Systems. An authenticated attacker with administrative privileges could exploit these vulnerabilities by sending specially crafted requests to the affected services. Successful exploitation could allow the attacker to execute arbitrary code with elevated privileges on the underlying operating system.

  88. CVE-2026-44858 7.2 Élevée

    Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS) · Arubanetworks arubaos · Arubanetworks sd-wan

    Stack-based buffer overflow vulnerabilities exist in several underlying management service components accessed through the command-line interface of the AOS-8 and AOS-10 Operating Systems. An authenticated attacker with administrative privileges could exploit these vulnerabilities by sending specially crafted requests to the affected services. Successful exploitation could allow the attacker to execute arbitrary code with elevated privileges on the underlying operating system.

  89. CVE-2026-44857 7.2 Élevée

    Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS) · Arubanetworks arubaos · Arubanetworks sd-wan

    Stack-based buffer overflow vulnerabilities exist in several underlying management service components accessed through the command-line interface of the AOS-8 and AOS-10 Operating Systems. An authenticated attacker with administrative privileges could exploit these vulnerabilities by sending specially crafted requests to the affected services. Successful exploitation could allow the attacker to execute arbitrary code with elevated privileges on the underlying operating system.

  90. CVE-2026-44856 7.2 Élevée

    Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS) · Arubanetworks arubaos · Arubanetworks sd-wan

    Stack-based buffer overflow vulnerabilities exist in several underlying management service components accessed through the command-line interface of the AOS-8 and AOS-10 Operating Systems. An authenticated attacker with administrative privileges could exploit these vulnerabilities by sending specially crafted requests to the affected services. Successful exploitation could allow the attacker to execute arbitrary code with elevated privileges on the underlying operating system.

  91. CVE-2026-44855 7.2 Élevée

    Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS) · Arubanetworks arubaos · Arubanetworks sd-wan

    Stack-based buffer overflow vulnerabilities exist in several underlying management service components accessed through the command-line interface of the AOS-8 and AOS-10 Operating Systems. An authenticated attacker with administrative privileges could exploit these vulnerabilities by sending specially crafted requests to the affected services. Successful exploitation could allow the attacker to execute arbitrary code with elevated privileges on the underlying operating system.

  92. CVE-2026-44854 7.2 Élevée

    Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS) · Arubanetworks arubaos · Arubanetworks sd-wan

    Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Successful exploitation could allow an authenticated remote attacker to upload arbitrary files to the underlying operating system, potentially leading to remote code execution as a privileged user.

  93. CVE-2026-44853 7.2 Élevée

    Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS) · Arubanetworks arubaos · Arubanetworks sd-wan

    Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Successful exploitation could allow an authenticated remote attacker to upload arbitrary files to the underlying operating system, potentially leading to remote code execution as a privileged user.

  94. CVE-2026-44852 7.2 Élevée

    Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS) · Arubanetworks arubaos · Arubanetworks sd-wan

    An authenticated remote code execution vulnerability exists in the AOS-8 and AOS-10 web-based management interface. A vulnerability in the certificate download functionality could allow an authenticated remote attacker to overwrite arbitrary files on the underlying operating system by exploiting improper input validation in the file path parameter. Successful exploitation could allow the attacker to execute arbitrary commands on the underlying operating system as a privileged user.

  95. CVE-2026-23827 7.5 Élevée

    Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS) · Arubanetworks arubaos · Arubanetworks sd-wan

    A heap-based buffer overflow vulnerability exists in a Network management service of AOS-8 and AOS-10 that could allow an unauthenticated remote attacker to achieve remote code execution. Successful exploitation could allow an unauthenticated attacker to execute arbitrary code as a privileged user on the underlying operating system, potentially leading to a system compromise. Exploitation may also result in a denial-of-service (DoS) condition affecting the impacted system process.

  96. CVE-2026-23826 7.5 Élevée

    Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS) · Arubanetworks arubaos · Arubanetworks sd-wan

    A vulnerability in a network management service of AOS-8 Operating System could allow an unauthenticated remote attacker to exploit this vulnerability by sending specially crafted network packets to the affected device, potentially resulting in a denial-of-service condition. Successful exploitation could cause the affected service process to terminate unexpectedly, disrupting normal device operations.

  97. CVE-2026-23825 7.5 Élevée

    Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS) · Arubanetworks arubaos · Arubanetworks sd-wan

    Vulnerabilities exist in a protocol-handling component of AOS-8 and AOS-10 Operating Systems. An unauthenticated attacker could exploit these vulnerabilities by sending specially crafted network messages to the affected service. Due to insufficient input validation, successful exploitation may terminate a critical system process, resulting in a denial-of-service condition.

  98. CVE-2026-23824 7.5 Élevée

    Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS) · Arubanetworks arubaos · Arubanetworks sd-wan

    Vulnerabilities exist in a protocol-handling component of AOS-8 and AOS-10 Operating Systems. An unauthenticated attacker could exploit these vulnerabilities by sending specially crafted network messages to the affected service. Due to insufficient input validation, successful exploitation may terminate a critical system process, resulting in a denial-of-service condition.

  99. CVE-2026-23823 7.2 Élevée

    Hewlett Packard Enterprise (HPE) ArubaOS (AOS) · Arubanetworks arubaos

    A vulnerability in the command line interface of Access Points running AOS-10 could allow an authenticated remote attacker to perform command injection. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system. NOTE: This vulnerability only impacts Access Points running AOS-10.7.x.x and above. AOS-10.4 AP and AOS-8 Instant software branches are not affected by this vulnerability.

  100. CVE-2026-23822 5.3 Moyenne

    Hewlett Packard Enterprise (HPE) ArubaOS (AOS) · Arubanetworks arubaos

    A vulnerability in the XML handling component of AOS-8 DHCP services could allow an unauthenticated remote attacker to trigger a denial-of-service condition. Successful exploitation could allow an attacker to cause excessive resource consumption upon user interaction, leading to service disruption or reduced availability of the affected system. NOTE: This vulnerability only impacts Access Points running AOS Instant 8.x.x.x

  101. CVE-2026-23821 7.2 Élevée

    Hewlett Packard Enterprise (HPE) ArubaOS (AOS) · Arubanetworks arubaos

    A vulnerability in the configuration processing logic of Access Points running AOS-10 could allow an authenticated remote attacker to execute system commands under certain pre-existing conditions. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system. Note: Access Points running AOS-8 Instant software are not affected by this vulnerability.

  102. CVE-2026-23820 7.2 Élevée

    Hewlett Packard Enterprise (HPE) ArubaOS (AOS) · Arubanetworks arubaos

    A vulnerability in the command line interface of Access Points running AOS-10 and AOS-8 Instant could allow an authenticated remote attacker to execute system commands in a restricted shell environment. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.

  103. CVE-2026-23819 8.8 Élevée

    Hewlett Packard Enterprise (HPE) ArubaOS (AOS) · Arubanetworks arubaos

    A vulnerability in the web-based management interface of Access Points running AOS-10 and AOS-8 Instant could allow an unauthenticated remote attacker to execute arbitrary JavaScript code in a victim's browser within the same local network. Successful exploitation could allow an attacker to compromise user data and potentially manipulate device configuration settings.