What’s Vulnerable › Products

Hewlett Packard Enterprise (HPE) ArubaOS (AOS) vulnerabilities

322 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 149 published in the last 12 months.

Check whether your Hewlett Packard Enterprise (HPE) ArubaOS (AOS) version is affected

Latest Hewlett Packard Enterprise (HPE) ArubaOS (AOS) vulnerabilities

• CVE-2026-95721 — Authenticated Local Memory Corruption Vulnerability in AOS-8 Web-Based Management Interface (CVSS 3.3)
• CVE-2026-95720 — Authenticated Local Buffer Overflow Vulnerability leads to Denial-of-Service in AOS-8 (CVSS 4.4)
• CVE-2026-95719 — Authenticated Arbitrary File Deletion Vulnerability leads to Denial-of-Service in AOS-10 (CVSS 4.9)
• CVE-2026-95718 — Authentication Bypass Vulnerability in the PAPI Protocol of AOS-8 (CVSS 5.3)
• CVE-2026-95717 — Authenticated Stored Cross-Site Scripting (XSS) Vulnerability in AOS Web-Based Management Interface (CVSS 5.5)
• CVE-2026-95716 — Authentication Bypass in the PAPI Protocol of AOS-10 allows Unauthorized Configuration Changes (CVSS 6.5)
• CVE-2026-95715 — Unauthenticated Local Command Injection Vulnerability in AOS-10 Command Line Interface (CVSS 6.8)
• CVE-2026-95714 — Authenticated Adjacent Buffer Overflow Vulnerability leads to Remote Code Execution in AOS-10 (CVSS 6.8)
• CVE-2026-95713 — Unauthenticated Buffer Overflow Vulnerability leads to Denial-of-Service in AOS-8 Command Line Interface (CVSS 7.0)
• CVE-2026-95712 — Unauthenticated Adjacent Sensitive Information Disclosure and Denial-of-Service in AOS-8 via the PAPI Protocol (CVSS 7.1)
• CVE-2026-95711 — Authentication Bypass Leading to Remote Code Execution in AOS-10 Web-Based Management Interface (CVSS 7.1)
• CVE-2026-95710 — Unauthenticated Adjacent Buffer Overflow Vulnerability leads to Denial-of-Service in AOS-10 or AOS-8 (CVSS 7.1)
• CVE-2026-95709 — Authenticated Command Injection Vulnerabilities in AOS-10 (CVSS 7.2)
• CVE-2026-95708 — Authenticated File Write leads to Command Injection Vulnerabilities in AOS-10 (CVSS 7.2)
• CVE-2026-95707 — Authenticated Buffer Overflow Vulnerability leads to Remote Code Execution in AOS-8 (CVSS 7.2)
• CVE-2026-95706 — Authenticated Command Injection Vulnerabilities in AOS-8 (CVSS 7.2)
• CVE-2026-95705 — Authenticated Command Injection Vulnerabilities in AOS-8 (CVSS 7.2)
• CVE-2026-95704 — Authenticated Remote Code Execution allows Unauthorized System Control in Wireless Network Management Interface (CVSS 7.2)
• CVE-2026-79956 — Improper Sanitization leads to Command Injection in AOS-8 Web Interface (CVSS 7.2)
• CVE-2026-79955 — Unauthenticated Memory Corruption Vulnerability leads to Denial-of-Service in AOS-8 (CVSS 7.5)
• CVE-2026-79895 — Unauthenticated Remote Denial-of-Service (DoS) Vulnerabilities in AOS-10 (CVSS 7.5)
• CVE-2026-79894 — Unauthenticated Denial-of-Service (DoS) Vulnerability in the PAPI Protocol of AOS-8 (CVSS 7.5)
• CVE-2026-79893 — Unauthenticated Memory Corruption Vulnerabilities lead to Denial-of-Service in AOS-10 (CVSS 7.5)
• CVE-2026-79892 — Authenticated Local Memory Corruption Vulnerability leads to Arbitrary Code Execution in AOS-8 (CVSS 7.8)
• CVE-2026-79891 — Unauthenticated Buffer Overflow Vulnerability leads to Remote Code Execution in AOS-8 (CVSS 8.1)