Arubaos Aos (Hewlett Packard Enterprise Hpe) - vulnerabilities (CVEs)

105 CVEs, 71 in the last 30 days, 2 known versions, newest CVE from 2026-10-22. Vendor: Hewlett Packard Enterprise Hpe.

CVEs of Arubaos Aos

CVE-2026-95721 - CVSS 3.3 (low), 2026-10-22: A memory corruption vulnerability exists in the web-based management interface of AOS-8. Successful exploitation could allow an authenticated low privilege…
CVE-2026-95720 - CVSS 4.4 (medium), 2026-10-22: A buffer overflow vulnerability exists in AOS-8 that could allow an authenticated attacker with administrative access to cause denial of service. Successful…
CVE-2026-95719 - CVSS 4.9 (medium), 2026-10-22: An arbitrary file deletion vulnerability exists in the command line interface of AOS-10 that could allow an authenticated attacker with administrative…
CVE-2026-95718 - CVSS 5.3 (medium), 2026-10-22: An authentication bypass vulnerability in the PAPI protocol of AOS-8 could allow an unauthenticated remote attacker to circumvent existing authentication…
CVE-2026-95717 - CVSS 5.5 (medium), 2026-10-22: A stored cross-site scripting (XSS) vulnerability exists in the web-based management interface of AOS that could allow an authenticated remote attacker with…
CVE-2026-95716 - CVSS 6.5 (medium), 2026-10-22: An authentication bypass in the PAPI protocol of AOS-10 allows an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful…
CVE-2026-95715 - CVSS 6.8 (medium), 2026-10-22: An unauthenticated command injection vulnerability exists in the command line interface of AOS-10. Successful exploitation could allow an attacker with…
CVE-2026-95714 - CVSS 6.8 (medium), 2026-10-22: A buffer overflow vulnerability exists in the API of AOS-10 that could allow an authenticated adjacent attacker with high privileges to achieve remote code…
CVE-2026-95713 - CVSS 7 (high), 2026-10-22: An unauthenticated buffer overflow vulnerability exists in the command line interface of AOS-8. Successful exploitation could allow an unauthenticated remote…
CVE-2026-95712 - CVSS 7.1 (high), 2026-10-22: A sensitive information disclosure vulnerability in the PAPI protocol of AOS-8 could allow an unauthenticated adjacent attacker to access limited information…
CVE-2026-95711 - CVSS 7.1 (high), 2026-10-22: An authentication bypass vulnerability in the web-based management interface of AOS-10 could allow an unauthenticated adjacent attacker to circumvent existing…
CVE-2026-95710 - CVSS 7.1 (high), 2026-10-22: An unauthenticated buffer overflow vulnerability exists in the underlying operating system of AOS-10 or AOS-8 and could allow an unauthenticated adjacent…
CVE-2026-95709 - CVSS 7.2 (high), 2026-10-22: Command injection vulnerabilities exist in the affected interface of AOS-10 that could allow an authenticated remote attacker with high privileges to perform…
CVE-2026-95708 - CVSS 7.2 (high), 2026-10-22: Command injection vulnerabilities exist in the affected interface of AOS-10 that could allow an authenticated remote attacker with high privileges to perform…
CVE-2026-95707 - CVSS 7.2 (high), 2026-10-22: A buffer overflow vulnerability in the PAPI protocol of AOS-8 could allow an authenticated remote attacker with high privileges to achieve remote code…
CVE-2026-95706 - CVSS 7.2 (high), 2026-10-22: Command injection vulnerabilities in the affected interface of AOS-8 could allow an authenticated remote attacker with high privileges to perform command…
CVE-2026-95705 - CVSS 7.2 (high), 2026-10-22: Command injection vulnerabilities in the affected interface of AOS-8 could allow an authenticated remote attacker with high privileges to perform command…
CVE-2026-95704 - CVSS 7.2 (high), 2026-10-22: A vulnerability in the web-based management interface of wireless network management systems could allow an authenticated remote attacker to execute remote…
CVE-2026-79956 - CVSS 7.2 (high), 2026-10-22: A vulnerability in the CLI command handling of the AOS-8 web interface could allow an authenticated remote attacker to execute arbitrary commands on the…
CVE-2026-79955 - CVSS 7.5 (high), 2026-10-22: An unauthenticated memory corruption vulnerability exists in a service accessed via the PAPI protocol in AOS-8 that could allow an unauthenticated remote…
CVE-2026-79895 - CVSS 7.5 (high), 2026-10-22: Vulnerabilities in the affected interface of AOS-10 could allow an unauthenticated remote attacker to conduct a denial of service attack. Successful…
CVE-2026-79894 - CVSS 7.5 (high), 2026-10-22: An unauthenticated Denial-of-Service (DoS) vulnerability exists in the PAPI protocol of AOS-8. Successful exploitation of this vulnerability results in the…
CVE-2026-79893 - CVSS 7.5 (high), 2026-10-22: Memory corruption vulnerabilities in AOS-10 could allow an unauthenticated remote attacker to conduct a denial of service attack. Successful exploitation…
CVE-2026-79892 - CVSS 7.8 (high), 2026-10-22: A memory corruption vulnerability exists in AOS-8 that could allow an authenticated local attacker to execute arbitrary code. Successful exploitation could…
CVE-2026-79891 - CVSS 8.1 (high), 2026-10-22: A buffer overflow vulnerability exists in the command line interface of AOS-8 that could allow an unauthenticated remote attacker to run arbitrary commands on…
CVE-2026-79890 - CVSS 8.1 (high), 2026-10-22: There are command injection vulnerabilities in AOS-8 that could lead to unauthenticated remote code execution by sending specially crafted PAPI packets.…
CVE-2026-79889 - CVSS 8.1 (high), 2026-10-22: Vulnerabilities in multiple web interface endpoints of AOS-8 devices could allow an unauthenticated remote attacker to trigger a buffer overflow by using…
CVE-2026-79888 - CVSS 8.1 (high), 2026-10-22: A vulnerability in a certain web interface endpoint of AOS-8 devices could allow an unauthenticated remote attacker to trigger a buffer overflow. Successful…
CVE-2026-79887 - CVSS 8.1 (high), 2026-10-22: A vulnerability in the web interface of AOS-8 could allow an unauthenticated remote attacker to achieve remote code execution. Successful exploitation could…
CVE-2026-79886 - CVSS 8.2 (high), 2026-10-22: An unauthenticated buffer overflow vulnerability exists in the PAPI protocol of AOS-8. Successful exploitation could allow an unauthenticated remote attacker…
CVE-2026-79885 - CVSS 8.2 (high), 2026-10-22: An unauthenticated file write vulnerability exists in the PAPI protocol in AOS-8. Successful exploitation could allow an unauthenticated remote attacker to…
CVE-2026-79884 - CVSS 8.2 (high), 2026-10-22: A vulnerability in the web-based management interface of AOS-8 could allow an unauthenticated adjacent attacker to bypass existing authentication controls and…
CVE-2026-79883 - CVSS 8.3 (high), 2026-10-22: A buffer overflow vulnerability in the PAPI protocol of HPE Networking AOS-10 could allow an unauthenticated adjacent attacker to access sensitive…
CVE-2026-79882 - CVSS 8.3 (high), 2026-10-22: There is a command injection vulnerability in the PAPI protocol of AOS-10 that could lead to unauthenticated remote code execution by an adjacent attacker…
CVE-2026-79881 - CVSS 8.5 (high), 2026-10-22: An authentication bypass vulnerability in the underlying operating system of AOS-8 could allow an unauthenticated remote attacker to circumvent existing…
CVE-2026-79880 - CVSS 8.7 (high), 2026-10-22: A vulnerability in the command line interface of AOS-8 could allow an authenticated remote attacker with high privileges to conduct a server-side request…
CVE-2026-79879 - CVSS 8.8 (high), 2026-10-22: Memory corruption vulnerabilities in the affected interface of AOS-10 could lead to remote code execution by an unauthenticated adjacent attacker. Successful…
CVE-2026-79878 - CVSS 8.8 (high), 2026-10-22: A command injection vulnerability in the AOS-8 command line interface accessed by the PAPI protocol could lead to unauthenticated remote code execution by an…
CVE-2026-79877 - CVSS 8.8 (high), 2026-10-22: A remote code execution vulnerability in the underlying operating system of AOS-10 could allow an unauthenticated adjacent attacker to execute arbitrary code…
CVE-2026-79876 - CVSS 9.3 (critical), 2026-10-22: A sensitive information disclosure vulnerability in the Wi-Fi frame processing of AOS-10 could allow an unauthenticated adjacent attacker to access sensitive…
CVE-2026-79875 - CVSS 9.3 (critical), 2026-10-22: A vulnerability has been identified in the PAPI protocol of AOS-8 that could potentially allow an unauthenticated adjacent attacker to circumvent existing…
CVE-2026-79874 - CVSS 9.3 (critical), 2026-10-22: An authentication bypass in the API of AOS-10 allows an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful…
CVE-2026-79873 - CVSS 9.3 (critical), 2026-10-22: Authentication bypass vulnerabilities in the PAPI protocol of AOS-10 could allow an unauthenticated adjacent attacker to circumvent existing authentication…
CVE-2026-79872 - CVSS 9.4 (critical), 2026-10-22: A buffer overflow vulnerability exists in the underlying operating system of AOS that could lead to unauthenticated remote code execution by an…
CVE-2026-79871 - CVSS 9.6 (critical), 2026-10-22: A sensitive information disclosure vulnerability in the command line interface of AOS-10 could allow an unauthenticated remote attacker to access sensitive…
CVE-2026-79870 - CVSS 9.6 (critical), 2026-10-22: An authentication bypass vulnerability in the PAPI protocol of AOS-8 could allow an unauthenticated adjacent attacker to circumvent existing authentication…
CVE-2026-79869 - CVSS 9.6 (critical), 2026-10-22: Authentication bypass vulnerabilities in the affected interface of AOS-10 could allow an unauthenticated adjacent attacker to circumvent existing…
CVE-2026-79868 - CVSS 9.6 (critical), 2026-10-22: Authentication bypass vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated adjacent attacker to circumvent existing…
CVE-2026-79867 - CVSS 9.6 (critical), 2026-10-22: Authentication bypass vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated adjacent attacker to circumvent existing…
CVE-2026-79866 - CVSS 9.6 (critical), 2026-10-22: An unauthenticated path traversal vulnerability exists in the PAPI protocol in AOS-8. Successful exploitation of this vulnerability could allow an…
CVE-2026-79865 - CVSS 9.6 (critical), 2026-10-22: A memory corruption vulnerability in the affected interface of AOS-10 could allow an unauthenticated adjacent attacker to achieve remote code execution.…
CVE-2026-79864 - CVSS 9.6 (critical), 2026-10-22: Command injection vulnerabilities exist in the affected interface of AOS-10 that could allow an unauthenticated adjacent attacker to perform command…
CVE-2026-79863 - CVSS 9.6 (critical), 2026-10-22: Buffer overflow vulnerabilities in the affected interface of AOS-10 or AOS-8 could allow an unauthenticated adjacent attacker to execute arbitrary code by…
CVE-2026-79862 - CVSS 9.6 (critical), 2026-10-22: Buffer overflow vulnerabilities in the affected interface of AOS-10 or AOS-8 could allow an unauthenticated adjacent attacker to execute arbitrary code by…
CVE-2026-79861 - CVSS 9.8 (critical), 2026-10-22: There is a command injection vulnerability in AOS-10 that could lead to unauthenticated remote code execution by sending specially crafted PAPI packets.…
CVE-2026-79860 - CVSS 9.8 (critical), 2026-10-22: Buffer overflow vulnerabilities exist in an underlying service of AOS-8 that could lead to unauthenticated remote code execution by sending specially crafted…
CVE-2026-79859 - CVSS 9.8 (critical), 2026-10-22: Buffer overflow vulnerabilities exist in the affected interface of AOS-8 that could lead to unauthenticated remote code execution. Successful exploitation…
CVE-2026-79858 - CVSS 9.8 (critical), 2026-10-22: An unauthenticated SQL injection vulnerability exists in the PAPI protocol in AOS-8. Successful exploitation could allow an unauthenticated remote attacker to…
CVE-2026-79857 - CVSS 9.8 (critical), 2026-10-22: There is a command injection vulnerability in the PAPI protocol (Aruba's access point management protocol) of AOS-8 that could lead to unauthenticated remote…
CVE-2026-79856 - CVSS 9.8 (critical), 2026-10-22: A buffer overflow vulnerability exists in the PAPI protocol of AOS-8 that could allow an unauthenticated remote attacker to circumvent existing authentication…
CVE-2026-79855 - CVSS 9.8 (critical), 2026-10-22: An authentication bypass vulnerability in the SSH daemon of AOS-8 allows an unauthenticated remote attacker to circumvent existing authentication controls.…
CVE-2026-79854 - CVSS 9.8 (critical), 2026-10-22: A vulnerability in the affected interface of AOS-10 could allow an unauthenticated remote attacker to conduct SQL injection attacks against the AOS-10…
CVE-2026-79853 - CVSS 9.8 (critical), 2026-10-22: Sensitive information disclosure vulnerabilities in the affected interface of AOS-10 could allow an unauthenticated remote attacker to obtain sensitive…
CVE-2026-79852 - CVSS 9.8 (critical), 2026-10-22: A vulnerability in the web-based management interface of AOS could allow an unauthenticated remote attacker to conduct SQL injection attacks against the AOS…
CVE-2026-79851 - CVSS 10 (critical), 2026-10-22: Buffer overflow vulnerabilities exist in the affected interface of AOS-10 that could lead to unauthenticated remote code execution. Successful exploitation…
CVE-2026-79850 - CVSS 10 (critical), 2026-10-22: Vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated remote attacker to bypass existing authentication controls and run arbitrary…
CVE-2026-79849 - CVSS 10 (critical), 2026-10-22: Vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated remote attacker to conduct SQL injection attacks against an affected AOS-8…
CVE-2026-79848 - CVSS 10 (critical), 2026-10-22: Vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated remote attacker to conduct SQL injection attacks against an affected AOS-8…
CVE-2026-79847 - CVSS 10 (critical), 2026-10-22: Buffer overflow vulnerabilities in the affected interface of AOS-10 could lead to unauthenticated remote code execution by sending specially crafted packets…
CVE-2026-79846 - CVSS 10 (critical), 2026-10-22: Command injection vulnerabilities exist in the affected interface of AOS-8 that could allow an unauthenticated remote attacker to run arbitrary commands on…
CVE-2026-79844 - CVSS 10 (critical), 2026-10-22: Authentication bypass vulnerabilities in the affected interface of AOS-10 could allow an unauthenticated remote attacker to run arbitrary commands on the…
CVE-2026-23823 - CVSS 7.2 (high), 2026-05-12: A vulnerability in the command line interface of Access Points running AOS-10 could allow an authenticated remote attacker to perform command injection.…
CVE-2026-23820 - CVSS 7.2 (high), 2026-05-12: A vulnerability in the command line interface of Access Points running AOS-10 and AOS-8 Instant could allow an authenticated remote attacker to execute system…
CVE-2026-23819 - CVSS 8.8 (high), 2026-05-12: A vulnerability in the web-based management interface of Access Points running AOS-10 and AOS-8 Instant could allow an unauthenticated remote attacker to…
CVE-2026-23822 - CVSS 5.3 (medium), 2026-05-12: A vulnerability in the XML handling component of AOS-8 DHCP services could allow an unauthenticated remote attacker to trigger a denial-of-service condition.…
CVE-2026-23821 - CVSS 7.2 (high), 2026-05-12: A vulnerability in the configuration processing logic of Access Points running AOS-10 could allow an authenticated remote attacker to execute system commands…
CVE-2025-37179 - CVSS 5.3 (medium), 2026-01-13: Multiple out-of-bounds read vulnerabilities were identified in a system component responsible for handling certain data buffers. Due to insufficient…
CVE-2025-37172 - CVSS 7.2 (high), 2026-01-13: Authenticated command injection vulnerabilities exist in the web-based management interface of mobility conductors running AOS-8 operating system. Successful…
CVE-2025-37175 - CVSS 7.2 (high), 2026-01-13: Arbitrary file upload vulnerability exists in the web-based management interface of mobility conductors running either AOS-10 or AOS-8 operating systems.…
CVE-2025-37178 - CVSS 7.5 (high), 2026-01-13: Multiple out-of-bounds read vulnerabilities were identified in a system component responsible for handling certain data buffers. Due to insufficient…
CVE-2025-37171 - CVSS 7.2 (high), 2026-01-13: Authenticated command injection vulnerabilities exist in the web-based management interface of mobility conductors running AOS-8 operating system. Successful…
CVE-2025-37174 - CVSS 7.2 (high), 2026-01-13: Authenticated arbitrary file write vulnerability exists in the web-based management interface of mobility conductors running either AOS-10 or AOS-8 operating…
CVE-2025-37177 - CVSS 6.5 (medium), 2026-01-13: An arbitrary file deletion vulnerability has been identified in the command-line interface of mobility conductors running either AOS-10 or AOS-8 operating…
CVE-2025-37173 - CVSS 7.2 (high), 2026-01-13: An improper input handling vulnerability exists in the web-based management interface of mobility conductors running either AOS-10 or AOS-8 operating systems.…
CVE-2025-37176 - CVSS 7.2 (high), 2026-01-13: A command injection vulnerability in AOS-8 allows an authenticated privileged user to alter a package header to inject shell commands, potentially affecting…
CVE-2025-37169 - CVSS 7.2 (high), 2026-01-13: A stack overflow vulnerability exists in the AOS-10 web-based management interface of a Mobility Gateway. Successful exploitation could allow an authenticated…
CVE-2025-37168 - CVSS 9.1 (critical), 2026-01-13: Arbitrary file deletion vulnerability have been identified in a system function of mobility conductors running AOS-8 operating system. Successful exploitation…
CVE-2025-37170 - CVSS 7.2 (high), 2026-01-13: Authenticated command injection vulnerabilities exist in the web-based management interface of mobility conductors running AOS-8 operating system. Successful…
CVE-2025-37143 - CVSS 4.9 (medium), 2025-10-14: An arbitrary file download vulnerability exists in the web-based management interface of AOS-10 GW and AOS-8 Controller/Mobility Conductor operating systems.…
CVE-2025-37146 - CVSS 7.2 (high), 2025-10-14: A vulnerability in the web-based management interface of network access point configuration services could allow an authenticated remote attacker to perform…
CVE-2025-37142 - CVSS 4.9 (medium), 2025-10-14: Arbitrary file download vulnerabilities exist in the CLI binary of AOS-10 GW and AOS-8 Controller/Mobility Conductor operating systems. Successful…
CVE-2025-37145 - CVSS 4.9 (medium), 2025-10-14: Arbitrary file download vulnerabilities exist in a low-level interface library in AOS-10 GW and AOS-8 Controller/Mobility Conductor operating systems.…
CVE-2025-37148 - CVSS 6.5 (medium), 2025-10-14: A vulnerability in the parsing of ethernet frames in AOS-8 Instant and AOS 10 could allow an unauthenticated remote attacker to conduct a denial of service…
CVE-2025-37144 - CVSS 4.9 (medium), 2025-10-14: Arbitrary file download vulnerabilities exist in a low-level interface library in AOS-10 GW and AOS-8 Controller/Mobility Conductor operating systems.…
CVE-2025-37147 - CVSS 7.1 (high), 2025-10-14: A Secure Boot Bypass Vulnerability exists in affected Access Points that allows an adversary to bypass the hardware root of trust verification in place to…
CVE-2025-37134 - CVSS 7.2 (high), 2025-10-14: An authenticated command injection vulnerability exists in the CLI binary of an AOS-8 Controller/Mobility Conductor operating system. Successful exploitation…
CVE-2025-37137 - CVSS 6.5 (medium), 2025-10-14: Arbitrary file deletion vulnerabilities have been identified in the command-line interface of an AOS-8 Controller/Mobility Conductor. Successful exploitation…
CVE-2025-37140 - CVSS 4.9 (medium), 2025-10-14: Arbitrary file download vulnerabilities exist in the CLI binary of AOS-10 GW and AOS-8 Controller/Mobility Conductor operating systems. Successful…
CVE-2025-37136 - CVSS 6.5 (medium), 2025-10-14: Arbitrary file deletion vulnerabilities have been identified in the command-line interface of an AOS-8 Controller/Mobility Conductor. Successful exploitation…
CVE-2025-37139 - CVSS 6 (medium), 2025-10-14: A vulnerability in an AOS firmware binary allows an authenticated malicious actor to permanently delete necessary boot information. Successful exploitation…