Hpe Arubaos

CVE-2026-95721 HPE unclassified vulnerability
CVE-2026-95721 3.3 - Low - October 22, 2026

A memory corruption vulnerability exists in the web-based management interface of AOS-8. Successful exploitation could allow an authenticated low privilege attacker with local access to view some system files and interrupt the normal operation of the affected service.

Buffer Overflow

CVE-2026-95720: HPE Security Flaw
CVE-2026-95720 4.4 - Medium - October 22, 2026

A buffer overflow vulnerability exists in AOS-8 that could allow an authenticated attacker with administrative access to cause denial of service. Successful exploitation could allow an attacker to crash the system, preventing it from rebooting without manual intervention and disrupting network operations.

Buffer Overflow

CVE-2026-95719: Unspecified Vulnerability in HPE Product
CVE-2026-95719 4.9 - Medium - October 22, 2026

An arbitrary file deletion vulnerability exists in the command line interface of AOS-10 that could allow an authenticated attacker with administrative privileges to cause a denial of service. Successful exploitation could allow an attacker to crash the system, preventing it from rebooting without manual intervention and disrupting normal operation of the affected device.

Incorrect Privilege Assignment

CVE-2026-95718: HPE Security Vulnerability
CVE-2026-95718 5.3 - Medium - October 22, 2026

An authentication bypass vulnerability in the PAPI protocol of AOS-8 could allow an unauthenticated remote attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to make limited unauthorized modifications to certain settings of the affected system.

authentification

Unknown HPE Vulnerability
CVE-2026-95717 5.5 - Medium - October 22, 2026

A stored cross-site scripting (XSS) vulnerability exists in the web-based management interface of AOS that could allow an authenticated remote attacker with high privileges to inject malicious scripts. Successful exploitation could allow an attacker to execute arbitrary script code in the context of another authenticated user's browser session.

XSS

HPE CVE-2026-95716: Potential Vulnerability
CVE-2026-95716 6.5 - Medium - October 22, 2026

An authentication bypass in the PAPI protocol of AOS-10 allows an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation allows an attacker to change the state of certain settings of a vulnerable system.

Improper Privilege Management

Non-Described Vulnerability in HPE Product
CVE-2026-95715 6.8 - Medium - October 22, 2026

An unauthenticated command injection vulnerability exists in the command line interface of AOS-10. Successful exploitation could allow an attacker with physical access to execute arbitrary commands as a privileged user on the underlying operating system leading to complete system compromise.

Command Injection

Unknown CVE in HPE Product: Security Vulnerability
CVE-2026-95714 6.8 - Medium - October 22, 2026

A buffer overflow vulnerability exists in the API of AOS-10 that could allow an authenticated adjacent attacker with high privileges to achieve remote code execution. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system.

Buffer Overflow

CVE-2026-95713: HPE Vulnerability in Unknown Component
CVE-2026-95713 7 - High - October 22, 2026

An unauthenticated buffer overflow vulnerability exists in the command line interface of AOS-8. Successful exploitation could allow an unauthenticated remote attacker to disrupt the availability of the affected interface, along with limited access to or modification of some system data.

Buffer Overflow

HPE Software Vulnerability: Potential RCE (CVE-2026-95712)
CVE-2026-95712 7.1 - High - October 22, 2026

A sensitive information disclosure vulnerability in the PAPI protocol of AOS-8 could allow an unauthenticated adjacent attacker to access limited information handled by the affected service. Successful exploitation could allow an attacker to view some information and to disrupt the availability of the affected service.

Information Disclosure

HPE CVE-2026-95711 Vulnerability in Unknown Component
CVE-2026-95711 7.1 - High - October 22, 2026

An authentication bypass vulnerability in the web-based management interface of AOS-10 could allow an unauthenticated adjacent attacker to circumvent existing authentication controls and run arbitrary commands on the underlying host if certain preconditions outside of the attacker's control are met. Successful exploitation of this vulnerability could allow an attacker to execute arbitrary commands on the underlying operating system.

Improper Privilege Management

HPE CVE-2026-95710: Vulnerability in unknown component
CVE-2026-95710 7.1 - High - October 22, 2026

An unauthenticated buffer overflow vulnerability exists in the underlying operating system of AOS-10 or AOS-8 and could allow an unauthenticated adjacent attacker to conduct a denial of service attack. Successful exploitation could allow an attacker to disrupt the availability of the affected system, with a limited impact to the integrity of the affected component.

Buffer Overflow

HPE Unspecified Component Vulnerability
CVE-2026-95709 7.2 - High - October 22, 2026

Command injection vulnerabilities exist in the affected interface of AOS-10 that could allow an authenticated remote attacker with high privileges to perform command injection. Successful exploitation could allow an attacker to execute arbitrary commands as a privileged user on the underlying operating system.

Command Injection

CVE-2026-95708: Potential Vulnerability in HPE Component
CVE-2026-95708 7.2 - High - October 22, 2026

Command injection vulnerabilities exist in the affected interface of AOS-10 that could allow an authenticated remote attacker with high privileges to perform command injection. Successful exploitation could allow an attacker to execute arbitrary commands as a privileged user on the underlying operating system.

Command Injection

HPE Unspecified Vulnerability
CVE-2026-95707 7.2 - High - October 22, 2026

A buffer overflow vulnerability in the PAPI protocol of AOS-8 could allow an authenticated remote attacker with high privileges to achieve remote code execution. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system.

Buffer Overflow

Security vulnerability in HPE product
CVE-2026-95706 7.2 - High - October 22, 2026

Command injection vulnerabilities in the affected interface of AOS-8 could allow an authenticated remote attacker with high privileges to perform command injection. Successful exploitation could allow an attacker to execute commands with the privileges of the impacted mechanism on the underlying operating system.

Command Injection

HPE CVE-2026-95705: Unspecified Vulnerability
CVE-2026-95705 7.2 - High - October 22, 2026

Command injection vulnerabilities in the affected interface of AOS-8 could allow an authenticated remote attacker with high privileges to perform command injection. Successful exploitation could allow an attacker to execute commands with the privileges of the impacted mechanism on the underlying operating system.

Command Injection

HPE product vulnerability: unspecified
CVE-2026-95704 7.2 - High - October 22, 2026

A vulnerability in the web-based management interface of wireless network management systems could allow an authenticated remote attacker to execute remote code. Successful exploitation could enable an attacker to execute arbitrary commands on the underlying operating system, potentially compromising system integrity and data security.

Authorization

Unknown vulnerability in HPE product
CVE-2026-79956 7.2 - High - October 22, 2026

A vulnerability in the CLI command handling of the AOS-8 web interface could allow an authenticated remote attacker to execute arbitrary commands on the underlying operating system. Successful exploitation could allow an attacker to run unauthorized commands on the system, potentially leading to system compromise.

Command Injection

Unknown Vulnerability Assigned by HPE (CVE-2026-79955)
CVE-2026-79955 7.5 - High - October 22, 2026

An unauthenticated memory corruption vulnerability exists in a service accessed via the PAPI protocol in AOS-8 that could allow an unauthenticated remote attacker to conduct a denial of service attack. Successful exploitation could allow an attacker to disrupt the availability of the affected service.

Buffer Overflow

CVE-2026-79895: HPE Product Vulnerability
CVE-2026-79895 7.5 - High - October 22, 2026

Vulnerabilities in the affected interface of AOS-10 could allow an unauthenticated remote attacker to conduct a denial of service attack. Successful exploitation could allow an attacker to disrupt the availability of the affected interface.

Resource Exhaustion

HPE Vulnerability: Unspecified Issue (CVE-2026-79894)
CVE-2026-79894 7.5 - High - October 22, 2026

An unauthenticated Denial-of-Service (DoS) vulnerability exists in the PAPI protocol of AOS-8. Successful exploitation of this vulnerability results in the ability to disrupt the availability of the affected interface.

Resource Exhaustion

HPE Unspecified Vulnerability
CVE-2026-79893 7.5 - High - October 22, 2026

Memory corruption vulnerabilities in AOS-10 could allow an unauthenticated remote attacker to conduct a denial of service attack. Successful exploitation could allow an attacker to disrupt the availability of the affected service.

Buffer Overflow

CVE-2026-79892: Unspecified HPE Vulnerability
CVE-2026-79892 7.8 - High - October 22, 2026

A memory corruption vulnerability exists in AOS-8 that could allow an authenticated local attacker to execute arbitrary code. Successful exploitation could allow the attacker to execute arbitrary code as a privileged user on the underlying operating system.

Buffer Overflow

HPE CVE-2026-79891 Unspecified Security Flaw
CVE-2026-79891 8.1 - High - October 22, 2026

A buffer overflow vulnerability exists in the command line interface of AOS-8 that could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system leading to complete system compromise.

Buffer Overflow

HPE Vulnerability: Unspecified
CVE-2026-79890 8.1 - High - October 22, 2026

There are command injection vulnerabilities in AOS-8 that could lead to unauthenticated remote code execution by sending specially crafted PAPI packets. Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system.

Command Injection

HPE Product Vulnerability: Unspecified Issue
CVE-2026-79889 8.1 - High - October 22, 2026

Vulnerabilities in multiple web interface endpoints of AOS-8 devices could allow an unauthenticated remote attacker to trigger a buffer overflow by using specially crafted requests. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system, leading to complete system compromise.

Buffer Overflow

HPE Vulnerability: Unspecified Security Flaw
CVE-2026-79888 8.1 - High - October 22, 2026

A vulnerability in a certain web interface endpoint of AOS-8 devices could allow an unauthenticated remote attacker to trigger a buffer overflow. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system, leading to complete system compromise.

Buffer Overflow

Unknown vulnerability in HPE product
CVE-2026-79887 8.1 - High - October 22, 2026

A vulnerability in the web interface of AOS-8 could allow an unauthenticated remote attacker to achieve remote code execution. Successful exploitation could lead to complete device control, enabling interception of network traffic and potential compromise of connected systems.

Code Injection

HPE Vulnerability Flagged: Unknown Component
CVE-2026-79886 8.2 - High - October 22, 2026

An unauthenticated buffer overflow vulnerability exists in the PAPI protocol of AOS-8. Successful exploitation could allow an unauthenticated remote attacker to disrupt the availability of the affected service on the controller, with a limited impact to its integrity.

CVE-2026-79885 HPE Vulnerability
CVE-2026-79885 8.2 - High - October 22, 2026

An unauthenticated file write vulnerability exists in the PAPI protocol in AOS-8. Successful exploitation could allow an unauthenticated remote attacker to make limited modifications to files on the affected system and to disrupt the availability of the affected service.

HPE CVE-2026-79884: Unspecified Vulnerability
CVE-2026-79884 8.2 - High - October 22, 2026

A vulnerability in the web-based management interface of AOS-8 could allow an unauthenticated adjacent attacker to bypass existing authentication controls and access sensitive information. Successful exploitation could allow an attacker to gain access to some data in a cleartext format possibly exposing other network infrastructure to further compromise.

Unspecified vulnerability in HPE hardware
CVE-2026-79883 8.3 - High - October 22, 2026

A buffer overflow vulnerability in the PAPI protocol of HPE Networking AOS-10 could allow an unauthenticated adjacent attacker to access sensitive information. Successful exploitation could allow an attacker to retrieve information which could be used to potentially gain further access to network services supported by AOS-10, and to interrupt the normal operation of the affected service.

HPE Unspecified Security Vulnerability CVE-2026-79882
CVE-2026-79882 8.3 - High - October 22, 2026

There is a command injection vulnerability in the PAPI protocol of AOS-10 that could lead to unauthenticated remote code execution by an adjacent attacker sending specially crafted packets. Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system.

CVE-2026-79881: HPE Vulnerability
CVE-2026-79881 8.5 - High - October 22, 2026

An authentication bypass vulnerability in the underlying operating system of AOS-8 could allow an unauthenticated remote attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system leading to complete system compromise.

CVE-2026-79880: HPE Vulnerability
CVE-2026-79880 8.7 - High - October 22, 2026

A vulnerability in the command line interface of AOS-8 could allow an authenticated remote attacker with high privileges to conduct a server-side request forgery (SSRF) attack. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.

CVE-2026-79879: HPE Vulnerability Impact Unknown
CVE-2026-79879 8.8 - High - October 22, 2026

Memory corruption vulnerabilities in the affected interface of AOS-10 could lead to remote code execution by an unauthenticated adjacent attacker. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system.

HPE Product Vulnerability: Potential RCE
CVE-2026-79878 8.8 - High - October 22, 2026

A command injection vulnerability in the AOS-8 command line interface accessed by the PAPI protocol could lead to unauthenticated remote code execution by an adjacent attacker sending specially crafted PAPI packets destined to the PAPI UDP port 8211. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system.

HPE Vulnerability CVE-2026-79877
CVE-2026-79877 8.8 - High - October 22, 2026

A remote code execution vulnerability in the underlying operating system of AOS-10 could allow an unauthenticated adjacent attacker to execute arbitrary code on an affected device. Successful exploitation could allow an attacker to execute arbitrary commands as a privileged user on the underlying operating system leading to complete system compromise.

Unspecified Security Flaw in HPE Device, Component: Unknown
CVE-2026-79876 9.3 - Critical - October 22, 2026

A sensitive information disclosure vulnerability in the Wi-Fi frame processing of AOS-10 could allow an unauthenticated adjacent attacker to access sensitive information. Successful exploitation could allow an attacker to retrieve information which could be used to potentially gain further access to network services supported by AOS-10, or to interrupt the normal operation of the affected service.

Unknown vulnerability in HPE product
CVE-2026-79875 9.3 - Critical - October 22, 2026

A vulnerability has been identified in the PAPI protocol of AOS-8 that could potentially allow an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative access, modify system configurations, and access or manipulate sensitive data.

CVE-2026-79874 HPE Security Flaw
CVE-2026-79874 9.3 - Critical - October 22, 2026

An authentication bypass in the API of AOS-10 allows an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative access, modify system configurations, and access or manipulate sensitive data.

HPE Hardware Vulnerability 2026-79873
CVE-2026-79873 9.3 - Critical - October 22, 2026

Authentication bypass vulnerabilities in the PAPI protocol of AOS-10 could allow an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative access, modify system configurations, and access or manipulate sensitive data on affected devices.

CVE-2026-79872: HPE Security Vulnerability
CVE-2026-79872 9.4 - Critical - October 22, 2026

A buffer overflow vulnerability exists in the underlying operating system of AOS that could lead to unauthenticated remote code execution by an unauthenticated remote attacker. Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system.

HPE CVE-2026-79871: Unspecified Vulnerability
CVE-2026-79871 9.6 - Critical - October 22, 2026

A sensitive information disclosure vulnerability in the command line interface of AOS-10 could allow an unauthenticated remote attacker to access sensitive information. Successful exploitation could allow an attacker to retrieve information which could be used to potentially gain further access to network services supported by AOS-10.

CVE-2026-79870: HPE Product Vulnerability
CVE-2026-79870 9.6 - Critical - October 22, 2026

An authentication bypass vulnerability in the PAPI protocol of AOS-8 could allow an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative access, modify system configurations, access or manipulate sensitive data, and disrupt network operations.

Unknown HPE component vulnerability (CVE-2026-79869)
CVE-2026-79869 9.6 - Critical - October 22, 2026

Authentication bypass vulnerabilities in the affected interface of AOS-10 could allow an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to execute arbitrary commands as a privileged user on the underlying operating system.

Potential Remote Exploit in HPE System
CVE-2026-79868 9.6 - Critical - October 22, 2026

Authentication bypass vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative access, modify system configurations, and access or manipulate sensitive data, leading to complete compromise of the affected system.

CVE-2026-79867: Unspecified HPE Vulnerability
CVE-2026-79867 9.6 - Critical - October 22, 2026

Authentication bypass vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated adjacent attacker to circumvent existing authentication controls and run arbitrary commands on the underlying host. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system leading to complete system compromise.

CVE-2026-79866: HPE Potential Vulnerability
CVE-2026-79866 9.6 - Critical - October 22, 2026

An unauthenticated path traversal vulnerability exists in the PAPI protocol in AOS-8. Successful exploitation of this vulnerability could allow an unauthenticated adjacent attacker to read, modify, and delete files on the underlying operating system.