Skip to contentHewlett Packard Enterprise (hpe) Arubaos (aos) vulnerabilities
- hewlett packard enterprise (hpe) arubaos (aos)Unauthenticated Adjacent Memory Corruption Vulnerability leads to Remote Code Execution in AOS-10CVE-2026-798659.6 Critical
- hewlett packard enterprise (hpe) arubaos (aos)Unauthenticated Adjacent Command Injection Vulnerability in AOS-10CVE-2026-798649.6 Critical
- hewlett packard enterprise (hpe) arubaos (aos)Unauthenticated Adjacent Buffer Overflow Vulnerabilities lead to Remote Code ExecutionCVE-2026-798639.6 Critical
- hewlett packard enterprise (hpe) arubaos (aos)Unauthenticated Adjacent Buffer Overflow Vulnerabilities lead to Remote Code ExecutionCVE-2026-798629.6 Critical
- hewlett packard enterprise (hpe) arubaos (aos)Unauthenticated Command Injection Vulnerability in the PAPI Protocol of AOS-10CVE-2026-798619.8 Critical
- hewlett packard enterprise (hpe) arubaos (aos)Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-8CVE-2026-798609.8 Critical
- hewlett packard enterprise (hpe) arubaos (aos)Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-8CVE-2026-798599.8 Critical
- hewlett packard enterprise (hpe) arubaos (aos)Unauthenticated SQL Injection Vulnerability in the PAPI Protocol of AOS-8CVE-2026-798589.8 Critical
- hewlett packard enterprise (hpe) arubaos (aos)Unauthenticated Command Injection Vulnerability in AOS-8 PAPI ProtocolCVE-2026-798579.8 Critical
- hewlett packard enterprise (hpe) arubaos (aos)Unauthenticated Buffer Overflow Vulnerability leads to Authentication Bypass in AOS-8CVE-2026-798569.8 Critical
- hewlett packard enterprise (hpe) arubaos (aos)Authentication Bypass in the SSH Daemon of AOS-8 leads to Complete System CompromiseCVE-2026-798559.8 Critical
- hewlett packard enterprise (hpe) arubaos (aos)Unauthenticated SQL Injection Vulnerability leads to Remote Code Execution in AOS-10CVE-2026-798549.8 Critical
- hewlett packard enterprise (hpe) arubaos (aos)Unauthenticated Sensitive Information Disclosure leads to Remote Code Execution in AOS-10CVE-2026-798539.8 Critical
- hewlett packard enterprise (hpe) arubaos (aos)Unauthenticated SQL Injection allows Remote Code Execution in AOS Web-Based Management InterfaceCVE-2026-798529.8 Critical
- hewlett packard enterprise (hpe) arubaos (aos)Unauthenticated Buffer Overflow Vulnerability leads to Remote Code Execution in AOS-10CVE-2026-7985110.0 Critical
- hewlett packard enterprise (hpe) arubaos (aos)Authentication Bypass Leading to Remote Code Execution in AOS-8CVE-2026-7985010.0 Critical
- hewlett packard enterprise (hpe) arubaos (aos)Unauthenticated SQL Injection Vulnerabilities allow Remote Code Execution in AOS-8CVE-2026-7984910.0 Critical
- hewlett packard enterprise (hpe) arubaos (aos)Unauthenticated SQL Injection Vulnerabilities allow Remote Code Execution in AOS-8CVE-2026-7984810.0 Critical
- hewlett packard enterprise (hpe) arubaos (aos)Unauthenticated Buffer Overflow Vulnerabilities leads to Remote Code Execution in AOS-10CVE-2026-7984710.0 Critical
- hewlett packard enterprise (hpe) arubaos (aos)Unauthenticated Command Injection Vulnerabilities in AOS-8CVE-2026-7984610.0 Critical
- hewlett packard enterprise (hpe) arubaos (aos)Authentication Bypass Leading to Remote Code Execution in AOS-10CVE-2026-7984410.0 Critical
- arubanetworks arubaos, hewlett packard enterprise (hpe) arubaos (aos) +1 moreAuthenticated Command Injection leads to RCE in AOS-10 CLI CommandCVE-2026-238237.2 High
- arubanetworks arubaos, hewlett packard enterprise (hpe) arubaos (aos) +1 moreUnauthenticated XML External Entity Injection in AOS-8 Instant allows Denial of ServiceCVE-2026-238225.3 Medium
- arubanetworks arubaos, hewlett packard enterprise (hpe) arubaos (aos) +1 moreInconsistent input filtering allows Authenticated Command Injection in AOS-10 CLICVE-2026-238217.2 High
- arubanetworks arubaos, hewlett packard enterprise (hpe) arubaos (aos) +1 moreInconsistent input filtering allows Authenticated Command Injection in AOS-8 Instant and AOS-10 CLICVE-2026-238207.2 High
- arubanetworks arubaos, hewlett packard enterprise (hpe) arubaos (aos) +1 moreError in SSID Processing allows Stored XSS in Web Management InterfaceCVE-2026-238198.8 High
- arubanetworks arubaos, hewlett packard enterprise (hpe) arubaos (aos) +1 moreOut-of-Bounds Read Vulnerabilities Leading to Process Crash in AOS-8 Operating SystemCVE-2025-371795.3 Medium
- arubanetworks arubaos, hewlett packard enterprise (hpe) arubaos (aos) +1 moreOut-of-Bounds Read Vulnerabilities Leading to Process Crash in AOS-8 Operating SystemCVE-2025-371785.3 Medium
- arubanetworks arubaos, hewlett packard enterprise (hpe) arubaos (aos) +1 moreAuthenticated Arbitrary File Deletion Vulnerability in AOS-10 or AOS-8 Command Line Interface (CLI)CVE-2025-371776.5 Medium
- arubanetworks arubaos, hewlett packard enterprise (hpe) arubaos (aos) +1 moreAuthenticated Command Injection Vulnerability in an AOS-8 operating system's internal workflowCVE-2025-371766.5 Medium
- arubanetworks arubaos, hewlett packard enterprise (hpe) arubaos (aos) +1 moreAuthenticated Arbitrary File Upload Vulnerability in AOS-10 or AOS-8 Web-Based Management InterfaceCVE-2025-371757.2 High
- arubanetworks arubaos, hewlett packard enterprise (hpe) arubaos (aos) +1 moreAuthenticated Arbitrary File Write Vulnerability in AOS 10 and AOS-8 Web-Based Management InterfaceCVE-2025-371747.2 High
- arubanetworks arubaos, hewlett packard enterprise (hpe) arubaos (aos) +1 moreImproper Input Handling Vulnerability in Authenticated Configuration API Endpoint (AOS-10/AOS-8 Web UI)CVE-2025-371737.2 High
- arubanetworks arubaos, hewlett packard enterprise (hpe) arubaos (aos) +1 moreAuthenticated Command Injection Vulnerabilities in AOS-8 Web-Based Management InterfaceCVE-2025-371727.2 High
- arubanetworks arubaos, hewlett packard enterprise (hpe) arubaos (aos) +1 moreAuthenticated Command Injection Vulnerabilities in AOS-8 Web-Based Management InterfaceCVE-2025-371717.2 High
- arubanetworks arubaos, hewlett packard enterprise (hpe) arubaos (aos) +1 moreAuthenticated Command Injection Vulnerabilities in AOS-8 Web-Based Management InterfaceCVE-2025-371707.2 High
- arubanetworks arubaos, hewlett packard enterprise (hpe) arubaos (aos) +1 moreStack Overflow Vulnerability in AOS-10 Web-Based Management InterfaceCVE-2025-371697.2 High
- arubanetworks arubaos, hewlett packard enterprise (hpe) arubaos (aos) +1 moreUnauthenticated Arbitrary File Deletion Vulnerability in AOS-8 Operating SystemCVE-2025-371688.2 High
- arubanetworks arubaos, hewlett packard enterprise (hpe) arubaos (aos) +1 moreAuthenticated Arbitrary File Download Vulnerabilities in a Low-Level Interface Library Affecting AOS-10 GW and AOS-8 Controller/Mobility Conductor Web-Based Management InterfaceCVE-2025-371454.9 Medium
- arubanetworks arubaos, hewlett packard enterprise (hpe) arubaos (aos) +1 moreAuthenticated Arbitrary File Download Vulnerabilities in a Low-Level Interface Library Affecting AOS-10 GW and AOS-8 Controller/Mobility Conductor Web-Based Management InterfaceCVE-2025-371444.9 Medium
- arubanetworks arubaos, hewlett packard enterprise (hpe) arubaos (aos) +1 moreAuthenticated Arbitrary File Download Vulnerability in CLI Binary of AOS-10 GW and AOS-8 Controller/Mobility Conductor Web Interface (Physical Access Required)CVE-2025-371434.9 Medium
- arubanetworks arubaos, hewlett packard enterprise (hpe) arubaos (aos) +1 moreAuthenticated Arbitrary File Download Vulnerabilities in CLI Binary of AOS-8 Controller/Mobility Conductor Web-Based Management InterfaceCVE-2025-371424.9 Medium
- arubanetworks arubaos, hewlett packard enterprise (hpe) arubaos (aos) +1 moreAuthenticated Arbitrary File Download Vulnerabilities in CLI Binary of AOS-8 Controller/Mobility Conductor Web-Based Management InterfaceCVE-2025-371414.9 Medium
- arubanetworks arubaos, hewlett packard enterprise (hpe) arubaos (aos) +1 moreAuthenticated Arbitrary File Download Vulnerabilities in CLI Binary of AOS-8 Controller/Mobility Conductor Web-Based Management InterfaceCVE-2025-371404.9 Medium
- hewlett packard enterprise (hpe) arubaos (aos)Vulnerability in AOS firmware allows for Authenticated Local malicious actor to Permanently Disable BootCVE-2025-371396.0 Medium
- arubanetworks arubaos, hewlett packard enterprise (hpe) arubaos (aos) +1 moreAuthenticated Command Injection Vulnerability in CLI Binary of AOS-10 GW and AOS-8 Controller/Mobility Conductor Web-Based Management Interface (Physical Access Required)CVE-2025-371386.2 Medium
- arubanetworks arubaos, hewlett packard enterprise (hpe) arubaos (aos) +1 moreAuthenticated Arbitrary File Deletion Vulnerabilities in AOS-8 Controller/Mobility Conductor Command Line Interface (CLI)CVE-2025-371376.5 Medium
- arubanetworks arubaos, hewlett packard enterprise (hpe) arubaos (aos) +1 moreAuthenticated Arbitrary File Deletion Vulnerabilities in AOS-8 Controller/Mobility Conductor Command Line Interface (CLI)CVE-2025-371366.5 Medium
- arubanetworks arubaos, hewlett packard enterprise (hpe) arubaos (aos) +1 moreAuthenticated Arbitrary File Deletion Vulnerabilities in AOS-8 Controller/Mobility Conductor Command Line Interface (CLI)CVE-2025-371356.5 Medium
- arubanetworks arubaos, hewlett packard enterprise (hpe) arubaos (aos) +1 moreAuthenticated Command Injection Vulnerability in the Low-Level Interface Library Affecting AOS-10 GW and AOS-8 Controller/Mobility Conductor Web-Based Management InterfaceCVE-2025-371347.2 High
- Show moreLoading…