Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

HPE Aruba Networking Wireless Operating System (AOS) — Vulnerabilities & Security Advisories 27

All 27 CVE vulnerabilities found in HPE Aruba Networking Wireless Operating System (AOS), with AI-generated Chinese analysis, references, and POCs.

This page documents security vulnerabilities associated with the HPE Aruba Networking Wireless Operating System (AOS) across various Common Weakness Enumeration (CWE) categories. It serves as a centralized resource for tracking known flaws within this specific enterprise wireless infrastructure software, providing essential context for security professionals and network administrators responsible for maintaining the integrity of Aruba-managed networks. The content collected here encompasses a comprehensive range of vulnerability types, including remote code execution, privilege escalation, cross-site scripting, and information disclosure issues. These entries span from the initial release of the product to the present day, ensuring that historical trends and recent patches are accessible in one view. By aggregating data from multiple sources, including vendor advisories, security bulletins, and independent research disclosures, this page offers a holistic timeline of the product's security posture. Readers can utilize this resource to monitor how HPE Aruba Networking responds to discovered threats and to assess the overall risk profile of their deployed versions. Through this aggregation, users can effectively track the vendor’s advisory history to understand the pace and quality of their patch management. It also facilitates a deeper understanding of specific weakness classes prevalent in wireless operating systems, helping organizations identify common attack vectors. Furthermore, the page allows for a detailed lookup of a specific product’s vulnerability history, enabling teams to perform thorough impact analyses before applying updates or upgrading firmware. This structured approach supports informed decision-making and enhances the security resilience of wireless network environments.

Vendor: Hewlett Packard Enterprise (HPE)

CVE IDTitleCVSSSeverityPublished
CVE-2026-44871 Authenticated Command Injection Vulnerabilities in Command Line Interface (CLI) Service Accessed by PAPI Protocol of AOS-8 and AOS-10 Operating Systems 7.2 High2026-05-12
CVE-2026-44873 Insufficient Session Invalidation on User Account Deactivation in AOS-8 Operating System 5.4 Medium2026-05-12
CVE-2026-44874 Authenticated Arbitrary File Download via AOS-10 Web-Based Management Interface 4.9 Medium2026-05-12
CVE-2026-44872 Authenticated Arbitrary File Upload via Command Injection in AOS-8 AND AOS-10 Web-Based Management Interface 7.2 High2026-05-12
CVE-2026-44870 Authenticated Command Injection Vulnerabilities in Command Line Interface (CLI) Service Accessed by PAPI Protocol of AOS-8 and AOS-10 Operating Systems 7.2 High2026-05-12
CVE-2026-44869 Authenticated Command Injection Vulnerabilities in the Web-Based Management Interface of AOS-8 and AOS-10 7.2 High2026-05-12
CVE-2026-44868 Authenticated Command Injection Vulnerabilities in the Web-Based Management Interface of AOS-8 and AOS-10 7.2 High2026-05-12
CVE-2026-44867 Authenticated Command Injection Vulnerabilities in the Web-Based Management Interface of AOS-8 and AOS-10 7.2 High2026-05-12
CVE-2026-44866 Authenticated Command Injection Vulnerabilities in the Web-Based Management Interface of AOS-8 and AOS-10 7.2 High2026-05-12
CVE-2026-44865 Authenticated Command Injection Vulnerabilities in the Web-Based Management Interface of AOS-8 and AOS-10 7.2 High2026-05-12
CVE-2026-44864 Authenticated Remote Code Execution via SQL Injection in AOS-8 and AOS-10 Operating Systems 7.2 High2026-05-12
CVE-2026-44863 Authenticated Remote Code Execution via SQL Injection in AOS-8 and AOS-10 Operating Systems 7.2 High2026-05-12
CVE-2026-44862 Authenticated Remote Code Execution via SQL Injection in AOS-8 and AOS-10 Operating Systems 7.2 High2026-05-12
CVE-2026-44861 Authenticated Remote Code Execution via SQL Injection in AOS-8 and AOS-10 Operating Systems 7.2 High2026-05-12
CVE-2026-44860 Authenticated Remote Code Execution via SQL Injection in AOS-8 and AOS-10 Operating Systems 7.2 High2026-05-12
CVE-2026-44859 Authenticated Stack-Based Buffer Overflow in PAPI Services 7.2 High2026-05-12
CVE-2026-44858 Authenticated Stack-Based Buffer Overflow in PAPI Services 7.2 High2026-05-12
CVE-2026-44857 Authenticated Stack-Based Buffer Overflow in PAPI Services 7.2 High2026-05-12
CVE-2026-44856 Authenticated Stack-Based Buffer Overflow in PAPI Services 7.2 High2026-05-12
CVE-2026-44855 Authenticated Stack-Based Buffer Overflow in PAPI Services 7.2 High2026-05-12
CVE-2026-44854 Authenticated Remote Code Execution via Arbitrary File Write in AOS-8 and AOS-10 Web-Based Management Interface 7.2 High2026-05-12
CVE-2026-44853 Authenticated Remote Code Execution via Arbitrary File Write in AOS-8 and AOS-10 Web-Based Management Interface 7.2 High2026-05-12
CVE-2026-44852 Authenticated Remote Code Execution via Arbitrary File Overwrite in the AOS-8 and AOS-10 Web-Based Management Interface 7.2 High2026-05-12
CVE-2026-23827 Unauthenticated Remote Code Execution via Heap Buffer Overflow in Network Management Service 7.5 High2026-05-12
CVE-2026-23826 Unauthenticated Denial of Service in AOS-8 Network Management Service 7.5 High2026-05-12
CVE-2026-23825 Unauthenticated Denial-of-Service via Crafted Messages in a Network Protocol Handling Component 7.5 High2026-05-12
CVE-2026-23824 Unauthenticated Denial-of-Service via Crafted Messages in a Network Protocol Handling Component 7.5 High2026-05-12

All 27 known CVE vulnerabilities affecting HPE Aruba Networking Wireless Operating System (AOS) with full Chinese analysis, references, and POCs where available.