Advisories · Technology

arubadev Aruba HiSpeed Cache.

Every CVE that names arubadev Aruba HiSpeed Cache among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-15889 CVE record

CVSS 6.4 Medium

Aruba HiSpeed Cache <= 3.0.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Content
- arubadev Aruba HiSpeed Cache
- Cross-site scripting (XSS)
Not analysed yet 10 Sept 2026
CVE-2026-1924 CVE record

CVSS 4.3 Medium

Aruba HiSpeed Cache <= 3.0.4 - Cross-Site Request Forgery to Plugin Settings Reset
- arubadev Aruba HiSpeed Cache
- Cross-site request forgery (CSRF)
Not analysed yet 10 Apr 2026
CVE-2025-11706 CVE record

CVSS 6.1 Medium

Aruba HiSpeed Cache <= 3.0.2 - Reflected Cross-Site Scripting
- arubadev Aruba HiSpeed Cache
- Cross-site scripting (XSS)
Not analysed yet 19 Feb 2026
CVE-2025-11725 CVE record

CVSS 6.5 Medium

Aruba HiSpeed Cache <= 3.0.2 - Missing Authorization to Unauthenticated Plugin's Settings Modification
- arubadev Aruba HiSpeed Cache
- Broken access control
Not analysed yet 19 Feb 2026