Product by Aruba
Arubaos
72 known vulnerabilities in Arubaos (Aruba), 0 of them actively exploited (CISA KEV).
Key figures
72
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
32
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-79861 | Unauthenticated Command Injection Vulnerability in the PAPI Protocol of AOS-10 | 9.8 | |
| Critical | CVE-2026-79846 | Unauthenticated Command Injection Vulnerabilities in AOS-8 | 10.0 | |
| Critical | CVE-2026-79857 | Unauthenticated Command Injection Vulnerability in AOS-8 PAPI Protocol | 9.8 | |
| Critical | CVE-2026-79864 | Unauthenticated Adjacent Command Injection Vulnerability in AOS-10 | 9.6 | |
| Medium | CVE-2026-95715 | Unauthenticated Local Command Injection Vulnerability in AOS-10 Command Line Interface | 6.8 | |
| Critical | CVE-2026-79847 | Unauthenticated Buffer Overflow Vulnerabilities leads to Remote Code Execution in AOS-10 | 10.0 | |
| High | CVE-2026-95709 | Authenticated Command Injection Vulnerabilities in AOS-10 | 7.2 | |
| High | CVE-2026-95708 | Authenticated File Write leads to Command Injection Vulnerabilities in AOS-10 | 7.2 | |
| Critical | CVE-2026-79851 | Unauthenticated Buffer Overflow Vulnerability leads to Remote Code Execution in AOS-10 | 10.0 | |
| Critical | CVE-2026-79855 | Authentication Bypass in the SSH Daemon of AOS-8 leads to Complete System Compromise | 9.8 | |
| Critical | CVE-2026-79860 | Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-8 | 9.8 | |
| Critical | CVE-2026-79849 | Unauthenticated SQL Injection Vulnerabilities allow Remote Code Execution in AOS-8 | 10.0 | |
| Critical | CVE-2026-79848 | Unauthenticated SQL Injection Vulnerabilities allow Remote Code Execution in AOS-8 | 10.0 | |
| Critical | CVE-2026-79850 | Authentication Bypass Leading to Remote Code Execution in AOS-8 | 10.0 | |
| Critical | CVE-2026-79844 | Authentication Bypass Leading to Remote Code Execution in AOS-10 | 10.0 | |
| High | CVE-2026-95706 | Authenticated Command Injection Vulnerabilities in AOS-8 | 7.2 | |
| High | CVE-2026-95705 | Authenticated Command Injection Vulnerabilities in AOS-8 | 7.2 | |
| Critical | CVE-2026-79853 | Unauthenticated Sensitive Information Disclosure leads to Remote Code Execution in AOS-10 | 9.8 | |
| Critical | CVE-2026-79859 | Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-8 | 9.8 | |
| High | CVE-2026-79890 | Unauthenticated Command Injection Vulnerabilities in AOS-8 Accessed by the PAPI Protocol | 8.1 | |
| High | CVE-2026-79878 | Hewlett Packard Enterprise (HPE) ArubaOS (AOS): Command Injection | 8.8 | |
| Critical | CVE-2026-79854 | Unauthenticated SQL Injection Vulnerability leads to Remote Code Execution in AOS-10 | 9.8 | |
| Critical | CVE-2026-79852 | Unauthenticated SQL Injection allows Remote Code Execution in AOS Web-Based Management Interface | 9.8 | |
| Critical | CVE-2026-79856 | Unauthenticated Buffer Overflow Vulnerability leads to Authentication Bypass in AOS-8 | 9.8 | |
| Critical | CVE-2026-79872 | Unauthenticated Buffer Overflow Vulnerability allows Remote Code Execution in AOS-10 and AOS-8 | 9.4 |