Hewlett Packard Enterprise (HPE) ArubaOS (AOS)

• CVE-2026-79865 Critical 9.6 Unauthenticated Adjacent Memory Corruption Vulnerability leads to Remote Code Execution in AOS-10 0.4%
• CVE-2026-79864 Critical 9.6 Unauthenticated Adjacent Command Injection Vulnerability in AOS-10 1.5%
• CVE-2026-79863 Critical 9.6 Unauthenticated Adjacent Buffer Overflow Vulnerabilities lead to Remote Code Execution 0.3%
• CVE-2026-79862 Critical 9.6 Unauthenticated Adjacent Buffer Overflow Vulnerabilities lead to Remote Code Execution 0.3%
• CVE-2026-79861 Critical 9.8 Unauthenticated Command Injection Vulnerability in the PAPI Protocol of AOS-10 1.7%
• CVE-2026-79860 Critical 9.8 Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-8 0.7%
• CVE-2026-79859 Critical 9.8 Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-8 0.7%
• CVE-2026-79858 Critical 9.8 Unauthenticated SQL Injection Vulnerability in the PAPI Protocol of AOS-8 0.5%
• CVE-2026-79857 Critical 9.8 Unauthenticated Command Injection Vulnerability in AOS-8 PAPI Protocol 1.4%
• CVE-2026-79856 Critical 9.8 Unauthenticated Buffer Overflow Vulnerability leads to Authentication Bypass in AOS-8 0.6%
• CVE-2026-79855 Critical 9.8 Authentication Bypass in the SSH Daemon of AOS-8 leads to Complete System Compromise 0.8%
• CVE-2026-79854 Critical 9.8 Unauthenticated SQL Injection Vulnerability leads to Remote Code Execution in AOS-10 0.6%
• CVE-2026-79853 Critical 9.8 Unauthenticated Sensitive Information Disclosure leads to Remote Code Execution in AOS-10 0.7%
• CVE-2026-79852 Critical 9.8 Unauthenticated SQL Injection allows Remote Code Execution in AOS Web-Based Management Interface 0.6%
• CVE-2026-79851 Critical 10.0 Unauthenticated Buffer Overflow Vulnerability leads to Remote Code Execution in AOS-10 0.8%
• CVE-2026-79850 Critical 10.0 Authentication Bypass Leading to Remote Code Execution in AOS-8 0.7%
• CVE-2026-79849 Critical 10.0 Unauthenticated SQL Injection Vulnerabilities allow Remote Code Execution in AOS-8 0.7%
• CVE-2026-79848 Critical 10.0 Unauthenticated SQL Injection Vulnerabilities allow Remote Code Execution in AOS-8 0.7%
• CVE-2026-79847 Critical 10.0 Unauthenticated Buffer Overflow Vulnerabilities leads to Remote Code Execution in AOS-10 0.8%
• CVE-2026-79846 Critical 10.0 Unauthenticated Command Injection Vulnerabilities in AOS-8 1.6%
• CVE-2026-79844 Critical 10.0 Authentication Bypass Leading to Remote Code Execution in AOS-10 0.7%
• CVE-2026-23823 High 7.2 Authenticated Command Injection leads to RCE in AOS-10 CLI Command 1.0%
• CVE-2026-23822 Medium 5.3 Unauthenticated XML External Entity Injection in AOS-8 Instant allows Denial of Service 0.3%
• CVE-2026-23821 High 7.2 Inconsistent input filtering allows Authenticated Command Injection in AOS-10 CLI 0.6%
• CVE-2026-23820 High 7.2 Inconsistent input filtering allows Authenticated Command Injection in AOS-8 Instant and AOS-10 CLI 0.6%
• CVE-2026-23819 High 8.8 Error in SSID Processing allows Stored XSS in Web Management Interface 0.3%
• CVE-2025-37179 Medium 5.3 Out-of-Bounds Read Vulnerabilities Leading to Process Crash in AOS-8 Operating System 0.4%
• CVE-2025-37178 Medium 5.3 Out-of-Bounds Read Vulnerabilities Leading to Process Crash in AOS-8 Operating System 0.4%
• CVE-2025-37177 Medium 6.5 Authenticated Arbitrary File Deletion Vulnerability in AOS-10 or AOS-8 Command Line Interface (CLI) 0.4%
• CVE-2025-37176 Medium 6.5 Authenticated Command Injection Vulnerability in an AOS-8 operating system's internal workflow 1.4%
• CVE-2025-37175 High 7.2 Authenticated Arbitrary File Upload Vulnerability in AOS-10 or AOS-8 Web-Based Management Interface 0.5%
• CVE-2025-37174 High 7.2 Authenticated Arbitrary File Write Vulnerability in AOS 10 and AOS-8 Web-Based Management Interface 0.6%
• CVE-2025-37173 High 7.2 Improper Input Handling Vulnerability in Authenticated Configuration API Endpoint (AOS-10/AOS-8 Web UI) 0.4%
• CVE-2025-37172 High 7.2 Authenticated Command Injection Vulnerabilities in AOS-8 Web-Based Management Interface 1.3%
• CVE-2025-37171 High 7.2 Authenticated Command Injection Vulnerabilities in AOS-8 Web-Based Management Interface 1.4%
• CVE-2025-37170 High 7.2 Authenticated Command Injection Vulnerabilities in AOS-8 Web-Based Management Interface 1.3%
• CVE-2025-37169 High 7.2 Stack Overflow Vulnerability in AOS-10 Web-Based Management Interface 0.6%
• CVE-2025-37168 High 8.2 Unauthenticated Arbitrary File Deletion Vulnerability in AOS-8 Operating System 0.5%
• CVE-2025-37145 Medium 4.9 Authenticated Arbitrary File Download Vulnerabilities in a Low-Level Interface Library Affecting AOS-10 GW and AOS-8 Controller/Mobility Conductor Web-Based Management Interface 0.4%
• CVE-2025-37144 Medium 4.9 Authenticated Arbitrary File Download Vulnerabilities in a Low-Level Interface Library Affecting AOS-10 GW and AOS-8 Controller/Mobility Conductor Web-Based Management Interface 0.4%
• CVE-2025-37143 Medium 4.9 Authenticated Arbitrary File Download Vulnerability in CLI Binary of AOS-10 GW and AOS-8 Controller/Mobility Conductor Web Interface (Physical Access Required) 0.4%
• CVE-2025-37142 Medium 4.9 Authenticated Arbitrary File Download Vulnerabilities in CLI Binary of AOS-8 Controller/Mobility Conductor Web-Based Management Interface 0.4%
• CVE-2025-37141 Medium 4.9 Authenticated Arbitrary File Download Vulnerabilities in CLI Binary of AOS-8 Controller/Mobility Conductor Web-Based Management Interface 0.4%
• CVE-2025-37140 Medium 4.9 Authenticated Arbitrary File Download Vulnerabilities in CLI Binary of AOS-8 Controller/Mobility Conductor Web-Based Management Interface 0.4%
• CVE-2025-37139 Medium 6.0 Vulnerability in AOS firmware allows for Authenticated Local malicious actor to Permanently Disable Boot 0.1%
• CVE-2025-37138 Medium 6.2 Authenticated Command Injection Vulnerability in CLI Binary of AOS-10 GW and AOS-8 Controller/Mobility Conductor Web-Based Management Interface (Physical Access Required) 1.2%
• CVE-2025-37137 Medium 6.5 Authenticated Arbitrary File Deletion Vulnerabilities in AOS-8 Controller/Mobility Conductor Command Line Interface (CLI) 0.4%
• CVE-2025-37136 Medium 6.5 Authenticated Arbitrary File Deletion Vulnerabilities in AOS-8 Controller/Mobility Conductor Command Line Interface (CLI) 0.4%
• CVE-2025-37135 Medium 6.5 Authenticated Arbitrary File Deletion Vulnerabilities in AOS-8 Controller/Mobility Conductor Command Line Interface (CLI) 0.4%
• CVE-2025-37134 High 7.2 Authenticated Command Injection Vulnerability in the Low-Level Interface Library Affecting AOS-10 GW and AOS-8 Controller/Mobility Conductor Web-Based Management Interface 1.2%