arubaos_aos vulnerabilities
CVEs whose affected-version data names the arubaos_aos package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
71 CVEsRSS
CVE-2026-79862Critical· 9.6Unauthenticated Adjacent Buffer Overflow Vulnerabilities lead to Remote Code Execution
Buffer overflow vulnerabilities in the affected interface of AOS-10 or AOS-8 could allow an unauthenticated adjacent attacker to execute arbitrary code by sending specially crafted data to the affected interface. Successful exploitation …
CVE-2026-79860Critical· 9.8Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-8
Buffer overflow vulnerabilities exist in an underlying service of AOS-8 that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management protocol) UDP por…
CVE-2026-79859Critical· 9.8Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-8
Buffer overflow vulnerabilities exist in the affected interface of AOS-8 that could lead to unauthenticated remote code execution. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the unde…
CVE-2026-79858Critical· 9.8Unauthenticated SQL Injection Vulnerability in the PAPI Protocol of AOS-8
An unauthenticated SQL injection vulnerability exists in the PAPI protocol in AOS-8. Successful exploitation could allow an unauthenticated remote attacker to obtain and modify sensitive information in the underlying database and to inte…
CVE-2026-79857Critical· 9.8Unauthenticated Command Injection Vulnerability in AOS-8 PAPI Protocol
There is a command injection vulnerability in the PAPI protocol (Aruba's access point management protocol) of AOS-8 that could lead to unauthenticated remote code execution by sending specially crafted packets to the affected UDP port. S…
CVE-2026-79856Critical· 9.8Unauthenticated Buffer Overflow Vulnerability leads to Authentication Bypass in AOS-8
A buffer overflow vulnerability exists in the PAPI protocol of AOS-8 that could allow an unauthenticated remote attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrati…
CVE-2026-79853Critical· 9.8Unauthenticated Sensitive Information Disclosure leads to Remote Code Execution in AOS-10
Sensitive information disclosure vulnerabilities in the affected interface of AOS-10 could allow an unauthenticated remote attacker to obtain sensitive information from the affected system. Successful exploitation could allow an attacker…
CVE-2026-79855Critical· 9.8Authentication Bypass in the SSH Daemon of AOS-8 leads to Complete System Compromise
An authentication bypass vulnerability in the SSH daemon of AOS-8 allows an unauthenticated remote attacker to circumvent existing authentication controls. Successful exploitation allows an attacker to gain administrative privileges lead…
CVE-2026-79854Critical· 9.8Unauthenticated SQL Injection Vulnerability leads to Remote Code Execution in AOS-10
A vulnerability in the affected interface of AOS-10 could allow an unauthenticated remote attacker to conduct SQL injection attacks against the AOS-10 instance. Successful exploitation could allow an attacker to execute arbitrary command…
CVE-2026-79852Critical· 9.8Unauthenticated SQL Injection allows Remote Code Execution in AOS Web-Based Management Interface
A vulnerability in the web-based management interface of AOS could allow an unauthenticated remote attacker to conduct SQL injection attacks against the AOS instance. Successful exploitation could allow an attacker to execute arbitrary c…
CVE-2026-79846Critical· 10.0Unauthenticated Command Injection Vulnerabilities in AOS-8
Command injection vulnerabilities exist in the affected interface of AOS-8 that could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host if certain preconditions outside of the attacker's control ar…