Arubaos (Aos)
Approved changes feed: RSS · Atom
cpe:2.3:a:hewlett_packard_enterprise_(hpe):arubaos_(aos):*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Hewlett Packard Enterprise (Hpe) (b56c5716-cbd3-5c1e-816c-d6416dcfa20e) |
|---|---|
| Product | Arubaos (Aos) (743d7869-6b06-59bb-a1e6-1dace65a527a) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-23823 |
vulnerable | 2026-06-08 07:51:16.309068 |
Authenticated Command Injection leads to RCE in AOS-10 CLI Command
HIGH (7.2)
A vulnerability in the command line interface of Access Points running AOS-10 could allow an authenticated remote attacker to perform command injection. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.
NOTE: This vulnerability only impacts Access Points running AOS-10.7.x.x and above. AOS-10.4 AP and AOS-8 Instant software branches are not affected by this vulnerability.
Published: 2026-05-12T18:38:44.771Z
Updated: 2026-05-13T03:58:36.867Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-23822 |
vulnerable | 2026-06-08 07:51:16.308753 |
Unauthenticated XML External Entity Injection in AOS-8 Instant allows Denial of Service
MEDIUM (5.3)
A vulnerability in the XML handling component of AOS-8 DHCP services could allow an unauthenticated remote attacker to trigger a denial-of-service condition. Successful exploitation could allow an attacker to cause excessive resource consumption upon user interaction, leading to service disruption or reduced availability of the affected system.
NOTE: This vulnerability only impacts Access Points running AOS Instant 8.x.x.x
Published: 2026-05-12T18:37:08.787Z
Updated: 2026-05-12T19:25:55.101Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-23821 |
vulnerable | 2026-06-08 07:51:16.308420 |
Inconsistent input filtering allows Authenticated Command Injection in AOS-10 CLI
HIGH (7.2)
A vulnerability in the configuration processing logic of Access Points running AOS-10 could allow an authenticated remote attacker to execute system commands under certain pre-existing conditions. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.
Note: Access Points running AOS-8 Instant software are not affected by this vulnerability.
Published: 2026-05-12T18:35:34.806Z
Updated: 2026-05-13T03:58:38.032Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-23820 |
vulnerable | 2026-06-08 07:51:16.308022 |
Inconsistent input filtering allows Authenticated Command Injection in AOS-8 Instant and AOS-10 CLI
HIGH (7.2)
A vulnerability in the command line interface of Access Points running AOS-10 and AOS-8 Instant could allow an authenticated remote attacker to execute system commands in a restricted shell environment. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.
Published: 2026-05-12T18:34:34.107Z
Updated: 2026-05-13T03:58:39.169Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-23819 |
vulnerable | 2026-06-08 07:51:16.307674 |
Error in SSID Processing allows Stored XSS in Web Management Interface
HIGH (8.8)
A vulnerability in the web-based management interface of Access Points running AOS-10 and AOS-8 Instant could allow an unauthenticated remote attacker to execute arbitrary JavaScript code in a victim's browser within the same local network. Successful exploitation could allow an attacker to compromise user data and potentially manipulate device configuration settings.
Published: 2026-05-12T18:31:33.726Z
Updated: 2026-05-12T19:31:00.149Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-37179 |
vulnerable | 2026-06-08 07:21:02.316855 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-37178 |
vulnerable | 2026-06-08 07:21:02.316592 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-37177 |
vulnerable | 2026-06-08 07:21:02.316135 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-37176 |
vulnerable | 2026-06-08 07:21:02.315761 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-37175 |
vulnerable | 2026-06-08 07:21:02.315384 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-37174 |
vulnerable | 2026-06-08 07:21:02.314889 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-37173 |
vulnerable | 2026-06-08 07:21:02.314612 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-37172 |
vulnerable | 2026-06-08 07:21:02.314212 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-37171 |
vulnerable | 2026-06-08 07:21:02.313751 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-37170 |
vulnerable | 2026-06-08 07:21:02.313380 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-37169 |
vulnerable | 2026-06-08 07:21:02.313009 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-37168 |
vulnerable | 2026-06-08 07:21:02.312668 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-37148 |
vulnerable | 2026-06-08 07:21:02.290502 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-37147 |
vulnerable | 2026-06-08 07:21:02.290146 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-37146 |
vulnerable | 2026-06-08 07:21:02.289890 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-37145 |
vulnerable | 2026-06-08 07:21:02.289398 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-37144 |
vulnerable | 2026-06-08 07:21:02.288998 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-37143 |
vulnerable | 2026-06-08 07:21:02.288702 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-37142 |
vulnerable | 2026-06-08 07:21:02.288415 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-37141 |
vulnerable | 2026-06-08 07:21:02.288113 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-37140 |
vulnerable | 2026-06-08 07:21:02.287679 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-37139 |
vulnerable | 2026-06-08 07:21:02.287389 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-37138 |
vulnerable | 2026-06-08 07:21:02.287014 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-37137 |
vulnerable | 2026-06-08 07:21:02.286460 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-37136 |
vulnerable | 2026-06-08 07:21:02.281594 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-37135 |
vulnerable | 2026-06-08 07:21:02.281276 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-37134 |
vulnerable | 2026-06-08 07:21:02.280957 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-37133 |
vulnerable | 2026-06-08 07:21:02.280625 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-37132 |
vulnerable | 2026-06-08 07:21:02.278513 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.