4.9
Medium
CVE-2026-95719 An arbitrary file deletion vulnerability exists in the command line interface of AOS-10 that could allow an…
Description
An arbitrary file deletion vulnerability exists in the command line interface of AOS-10 that could allow an authenticated attacker with administrative privileges to cause a denial of service. Successful exploitation could allow an attacker to crash the system, preventing it from rebooting without manual intervention and disrupting normal operation of the affected device.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Unknown product 10.8 | 10.8.0.0 → 10.8.1.1 | No fix stated |
| Unknown product 10.6 | 10.6.0.0 → 10.7.2.6 | No fix stated |
| Unknown product 10.3 | 10.3.0.0 → 10.4.1.13 | No fix stated |
| ArubaOS (AOS) 10.8 | 10.8.0.0 → 10.8.1.1 | No fix stated |
| ArubaOS (AOS) 10.7 | 10.7.0.0 → 10.7.2.6 | No fix stated |
| ArubaOS (AOS) 10.4 | 10.4.0.0 → 10.4.1.13 | No fix stated |
Other CVEs of Unknown product
The 71 CVEs of Unknown product →
CVE-2026-95721
A memory corruption vulnerability exists in the web-based management interface of AOS-8
3.3
Low
CVE-2026-95720
A buffer overflow vulnerability exists in AOS-8 that could allow an authenticated attacker with administrative access to…
4.4
Medium
CVE-2026-95718
An authentication bypass vulnerability in the PAPI protocol of AOS-8 could allow an unauthenticated remote attacker to…
5.3
Medium
CVE-2026-95717
A stored cross-site scripting (XSS) vulnerability exists in the web-based management interface of AOS that could allow…
5.5
Medium