Known vulnerabilities in Hewlett Packard Enterprise (HPE) ArubaOS (AOS)
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-95721 | A memory corruption vulnerability exists in the web-based management interface of AOS-8 | 3.3 Low | Oct 22, 2026 |
| CVE-2026-95720 | A buffer overflow vulnerability exists in AOS-8 that could allow an authenticated attacker with administrative access to… | 4.4 Medium | Oct 22, 2026 |
| CVE-2026-95719 | An arbitrary file deletion vulnerability exists in the command line interface of AOS-10 that could allow an… | 4.9 Medium | Oct 22, 2026 |
| CVE-2026-95718 | An authentication bypass vulnerability in the PAPI protocol of AOS-8 could allow an unauthenticated remote attacker to… | 5.3 Medium | Oct 22, 2026 |
| CVE-2026-95717 | A stored cross-site scripting (XSS) vulnerability exists in the web-based management interface of AOS that could allow… | 5.5 Medium | Oct 22, 2026 |
| CVE-2026-95716 | An authentication bypass in the PAPI protocol of AOS-10 allows an unauthenticated adjacent attacker to circumvent… | 6.5 Medium | Oct 22, 2026 |
| CVE-2026-95715 | An unauthenticated command injection vulnerability exists in the command line interface of AOS-10 | 6.8 Medium | Oct 22, 2026 |
| CVE-2026-95714 | A buffer overflow vulnerability exists in the API of AOS-10 that could allow an authenticated adjacent attacker with… | 6.8 Medium | Oct 22, 2026 |
| CVE-2026-95713 | An unauthenticated buffer overflow vulnerability exists in the command line interface of AOS-8 | 7.0 High | Oct 22, 2026 |
| CVE-2026-95712 | A sensitive information disclosure vulnerability in the PAPI protocol of AOS-8 could allow an unauthenticated adjacent… | 7.1 High | Oct 22, 2026 |
| CVE-2026-95711 | An authentication bypass vulnerability in the web-based management interface of AOS-10 could allow an unauthenticated… | 7.1 High | Oct 22, 2026 |
| CVE-2026-95710 | An unauthenticated buffer overflow vulnerability exists in the underlying operating system of AOS-10 or AOS-8 and… | 7.1 High | Oct 22, 2026 |
| CVE-2026-95709 | Command injection vulnerabilities exist in the affected interface of AOS-10 that could allow an authenticated remote… | 7.2 High | Oct 22, 2026 |
| CVE-2026-95708 | Command injection vulnerabilities exist in the affected interface of AOS-10 that could allow an authenticated remote… | 7.2 High | Oct 22, 2026 |
| CVE-2026-95707 | A buffer overflow vulnerability in the PAPI protocol of AOS-8 could allow an authenticated remote attacker with high… | 7.2 High | Oct 22, 2026 |
| CVE-2026-95706 | Command injection vulnerabilities in the affected interface of AOS-8 could allow an authenticated remote attacker with… | 7.2 High | Oct 22, 2026 |
| CVE-2026-95705 | Command injection vulnerabilities in the affected interface of AOS-8 could allow an authenticated remote attacker with… | 7.2 High | Oct 22, 2026 |
| CVE-2026-95704 | A vulnerability in the web-based management interface of wireless network management systems could allow an… | 7.2 High | Oct 22, 2026 |
| CVE-2026-79956 | A vulnerability in the CLI command handling of the AOS-8 web interface could allow an authenticated remote attacker to… | 7.2 High | Oct 22, 2026 |
| CVE-2026-79955 | An unauthenticated memory corruption vulnerability exists in a service accessed via the PAPI protocol in AOS-8 that… | 7.5 High | Oct 22, 2026 |
| CVE-2026-79895 | Vulnerabilities in the affected interface of AOS-10 could allow an unauthenticated remote attacker to conduct a denial… | 7.5 High | Oct 22, 2026 |
| CVE-2026-79894 | An unauthenticated Denial-of-Service (DoS) vulnerability exists in the PAPI protocol of AOS-8 | 7.5 High | Oct 22, 2026 |
| CVE-2026-79893 | Memory corruption vulnerabilities in AOS-10 could allow an unauthenticated remote attacker to conduct a denial of… | 7.5 High | Oct 22, 2026 |
| CVE-2026-79892 | A memory corruption vulnerability exists in AOS-8 that could allow an authenticated local attacker to execute… | 7.8 High | Oct 22, 2026 |
| CVE-2026-79891 | A buffer overflow vulnerability exists in the command line interface of AOS-8 that could allow an unauthenticated remote… | 8.1 High | Oct 22, 2026 |
Other Hewlett Packard Enterprise (HPE) products
Fabric Composer 98
Unknown product 71
Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central 51
AOS-CX 46
EdgeConnect SD-WAN Gateways 38
ClearPass Policy Manager (CPPM) 36
Aruba ClearPass Policy Manager 33
HPE Aruba Networking Wireless Operating System (AOS) 27
EdgeConnect SD-WAN Orchestrator 27
Aruba EdgeConnect Enterprise Software 23
Instant On 20
AOS-8 Instant and AOS-10 AP 18