Hpe Aruba Networking Wireless Operating System (Aos)

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:hewlett_packard_enterprise_(hpe):hpe_aruba_networking_wireless_operating_system_(aos):*:*:*:*:*:*:*:*

part: a version: * update: *

VendorHewlett Packard Enterprise (Hpe) (b56c5716-cbd3-5c1e-816c-d6416dcfa20e)
ProductHpe Aruba Networking Wireless Operating System (Aos) (08f6773d-a2b3-5f7f-855f-b87365aae997)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-44874 vulnerable 2026-06-08 08:05:11.348130 Authenticated Arbitrary File Download via AOS-10 Web-Based Management Interface
MEDIUM (4.9)
A vulnerability exists in the web-based management interface of an AOS-10 Gateway that could allow an authenticated remote attacker to access sensitive files on the underlying operating system. Successful exploitation of this vulnerability could result in the disclosure of confidential system information, potentially enabling further attacks against the affected device.
Published: 2026-05-12T19:19:25.459Z
Updated: 2026-05-15T20:05:06.617Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-44873 vulnerable 2026-06-08 08:05:11.347768 Insufficient Session Invalidation on User Account Deactivation in AOS-8 Operating System
MEDIUM (5.4)
A session management vulnerability in AOS-8 allows previously authenticated users to retain network access after their accounts are administratively disabled. Existing sessions are not invalidated when credentials are revoked, enabling continued access until session expiration. An attacker with compromised credentials could exploit this behavior to maintain unauthorized access even after the account has been disabled.
Published: 2026-05-12T19:19:59.595Z
Updated: 2026-05-15T20:06:05.460Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-44872 vulnerable 2026-06-08 08:05:11.347246 Authenticated Arbitrary File Upload via Command Injection in AOS-8 AND AOS-10 Web-Based Management Interface
HIGH (7.2)
A command injection vulnerability exists in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Successful exploitation could allow an authenticated remote attacker to place arbitrary files on the underlying filesystem of the affected device.
Published: 2026-05-12T19:18:16.627Z
Updated: 2026-05-15T20:04:56.217Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-44871 vulnerable 2026-06-08 08:05:11.346715 Authenticated Command Injection Vulnerabilities in Command Line Interface (CLI) Service Accessed by PAPI Protocol of AOS-8 and AOS-10 Operating Systems
HIGH (7.2)
Command injection vulnerabilities exist in the command line interface (CLI) service accessed by the PAPI protocol of AOS-8 and AOS-10 Operating Systems. Successful exploitation of these vulnerabilities could allow an authenticated remote attacker to execute arbitrary commands on the underlying operating system.
Published: 2026-05-12T21:06:12.315Z
Updated: 2026-05-14T03:56:13.003Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-44870 vulnerable 2026-06-08 08:05:11.346193 Authenticated Command Injection Vulnerabilities in Command Line Interface (CLI) Service Accessed by PAPI Protocol of AOS-8 and AOS-10 Operating Systems
HIGH (7.2)
Command injection vulnerabilities exist in the command line interface (CLI) service accessed by the PAPI protocol of AOS-8 and AOS-10 Operating Systems. Successful exploitation of these vulnerabilities could allow an authenticated remote attacker to execute arbitrary commands on the underlying operating system.
Published: 2026-05-12T19:16:36.732Z
Updated: 2026-05-13T15:52:39.148Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-44869 vulnerable 2026-06-08 08:05:11.345745 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-44868 vulnerable 2026-06-08 08:05:11.345346 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-44867 vulnerable 2026-06-08 08:05:11.344820 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-44866 vulnerable 2026-06-08 08:05:11.344405 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-44865 vulnerable 2026-06-08 08:05:11.343876 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-44864 vulnerable 2026-06-08 08:05:11.343406 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-44863 vulnerable 2026-06-08 08:05:11.342970 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-44862 vulnerable 2026-06-08 08:05:11.342541 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-44861 vulnerable 2026-06-08 08:05:11.342042 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-44860 vulnerable 2026-06-08 08:05:11.341741 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-44859 vulnerable 2026-06-08 08:05:11.341316 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-44858 vulnerable 2026-06-08 08:05:11.340796 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-44857 vulnerable 2026-06-08 08:05:11.340398 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-44856 vulnerable 2026-06-08 08:05:11.339880 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-44855 vulnerable 2026-06-08 08:05:11.339569 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-44854 vulnerable 2026-06-08 08:05:11.338865 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-44853 vulnerable 2026-06-08 08:05:11.338386 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-44852 vulnerable 2026-06-08 08:05:11.333093 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-23827 vulnerable 2026-06-08 07:51:16.313426 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-23826 vulnerable 2026-06-08 07:51:16.312984 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-23825 vulnerable 2026-06-08 07:51:16.312527 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-23824 vulnerable 2026-06-08 07:51:16.310598 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.