CVE-2026-95719

An arbitrary file deletion vulnerability exists in the command line interface of AOS-10 that could allow an authenticated attacker with administrative privileges to cause a denial of service. Successful exploitation could allow an attacker to crash the system, preventing it from rebooting without manual intervention and disrupting normal operation of the affected device.

Score

CVSS 3.1 4.9 Medium

Status

Awaiting Analysis - security-alert@hpe.com

Published

2026-10-22

Last modified

2026-10-26

Weaknesses

CWE-266

Affected products

• Arubaos Aos (Hewlett Packard Enterprise Hpe)

References

• https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05162en_us&docLocale=en_US