# Hewlett Packard Enterprise (HPE) ArubaOS (AOS). Every CVE that names Hewlett Packard Enterprise (HPE) ArubaOS (AOS) among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first - [Authenticated Local Memory Corruption Vulnerability in AOS-8 Web-Based Management Interface](https://agentprime.io/advisories/CVE-2026-95721.md) `CVE-2026-95721` · CVE record: Hewlett Packard Enterprise (HPE) ArubaOS (AOS) · CVSS 3.3 Low · Not analysed yet · Published 22 Oct 2026 · Tags: Memory corruption - [Authenticated Local Buffer Overflow Vulnerability leads to Denial-of-Service in AOS-8](https://agentprime.io/advisories/CVE-2026-95720.md) `CVE-2026-95720` · CVE record: Hewlett Packard Enterprise (HPE) ArubaOS (AOS) · CVSS 4.4 Medium · Not analysed yet · Published 22 Oct 2026 · Tags: Memory corruption - [Authenticated Arbitrary File Deletion Vulnerability leads to Denial-of-Service in AOS-10](https://agentprime.io/advisories/CVE-2026-95719.md) `CVE-2026-95719` · CVE record: Hewlett Packard Enterprise (HPE) ArubaOS (AOS) · CVSS 4.9 Medium · Not analysed yet · Published 22 Oct 2026 · Tags: Privilege escalation - [Authentication Bypass Vulnerability in the PAPI Protocol of AOS-8](https://agentprime.io/advisories/CVE-2026-95718.md) `CVE-2026-95718` · CVE record: Hewlett Packard Enterprise (HPE) ArubaOS (AOS) · CVSS 5.3 Medium · Not analysed yet · Published 22 Oct 2026 · Tags: Authentication bypass - [Authenticated Stored Cross-Site Scripting (XSS) Vulnerability in AOS Web-Based Management Interface](https://agentprime.io/advisories/CVE-2026-95717.md) `CVE-2026-95717` · CVE record: Hewlett Packard Enterprise (HPE) ArubaOS (AOS) · CVSS 5.5 Medium · Not analysed yet · Published 22 Oct 2026 · Tags: Cross-site scripting (XSS) - [Authentication Bypass in the PAPI Protocol of AOS-10 allows Unauthorized Configuration Changes](https://agentprime.io/advisories/CVE-2026-95716.md) `CVE-2026-95716` · CVE record: Hewlett Packard Enterprise (HPE) ArubaOS (AOS) · CVSS 6.5 Medium · Not analysed yet · Published 22 Oct 2026 · Tags: Privilege escalation - [Unauthenticated Local Command Injection Vulnerability in AOS-10 Command Line Interface](https://agentprime.io/advisories/CVE-2026-95715.md) `CVE-2026-95715` · CVE record: Hewlett Packard Enterprise (HPE) ArubaOS (AOS) · CVSS 6.8 Medium · Not analysed yet · Published 22 Oct 2026 · Tags: Command injection - [Authenticated Adjacent Buffer Overflow Vulnerability leads to Remote Code Execution in AOS-10](https://agentprime.io/advisories/CVE-2026-95714.md) `CVE-2026-95714` · CVE record: Hewlett Packard Enterprise (HPE) ArubaOS (AOS) · CVSS 6.8 Medium · Not analysed yet · Published 22 Oct 2026 · Tags: Memory corruption - [Unauthenticated Buffer Overflow Vulnerability leads to Denial-of-Service in AOS-8 Command Line Interface](https://agentprime.io/advisories/CVE-2026-95713.md) `CVE-2026-95713` · CVE record: Hewlett Packard Enterprise (HPE) ArubaOS (AOS) · CVSS 7.0 High · Not analysed yet · Published 22 Oct 2026 · Tags: Memory corruption - [Unauthenticated Adjacent Sensitive Information Disclosure and Denial-of-Service in AOS-8 via the PAPI Protocol](https://agentprime.io/advisories/CVE-2026-95712.md) `CVE-2026-95712` · CVE record: Hewlett Packard Enterprise (HPE) ArubaOS (AOS) · CVSS 7.1 High · Not analysed yet · Published 22 Oct 2026 · Tags: Information disclosure - [Authentication Bypass Leading to Remote Code Execution in AOS-10 Web-Based Management Interface](https://agentprime.io/advisories/CVE-2026-95711.md) `CVE-2026-95711` · CVE record: Hewlett Packard Enterprise (HPE) ArubaOS (AOS) · CVSS 7.1 High · Not analysed yet · Published 22 Oct 2026 · Tags: Privilege escalation - [Unauthenticated Adjacent Buffer Overflow Vulnerability leads to Denial-of-Service in AOS-10 or AOS-8](https://agentprime.io/advisories/CVE-2026-95710.md) `CVE-2026-95710` · CVE record: Hewlett Packard Enterprise (HPE) ArubaOS (AOS) · CVSS 7.1 High · Not analysed yet · Published 22 Oct 2026 · Tags: Memory corruption - [Authenticated Command Injection Vulnerabilities in AOS-10](https://agentprime.io/advisories/CVE-2026-95709.md) `CVE-2026-95709` · CVE record: Hewlett Packard Enterprise (HPE) ArubaOS (AOS) · CVSS 7.2 High · Not analysed yet · Published 22 Oct 2026 · Tags: Command injection - [Authenticated File Write leads to Command Injection Vulnerabilities in AOS-10](https://agentprime.io/advisories/CVE-2026-95708.md) `CVE-2026-95708` · CVE record: Hewlett Packard Enterprise (HPE) ArubaOS (AOS) · CVSS 7.2 High · Not analysed yet · Published 22 Oct 2026 · Tags: Command injection - [Authenticated Buffer Overflow Vulnerability leads to Remote Code Execution in AOS-8](https://agentprime.io/advisories/CVE-2026-95707.md) `CVE-2026-95707` · CVE record: Hewlett Packard Enterprise (HPE) ArubaOS (AOS) · CVSS 7.2 High · Not analysed yet · Published 22 Oct 2026 · Tags: Memory corruption - [Authenticated Command Injection Vulnerabilities in AOS-8](https://agentprime.io/advisories/CVE-2026-95706.md) `CVE-2026-95706` · CVE record: Hewlett Packard Enterprise (HPE) ArubaOS (AOS) · CVSS 7.2 High · Not analysed yet · Published 22 Oct 2026 · Tags: Command injection - [Authenticated Command Injection Vulnerabilities in AOS-8](https://agentprime.io/advisories/CVE-2026-95705.md) `CVE-2026-95705` · CVE record: Hewlett Packard Enterprise (HPE) ArubaOS (AOS) · CVSS 7.2 High · Not analysed yet · Published 22 Oct 2026 · Tags: Command injection - [Authenticated Remote Code Execution allows Unauthorized System Control in Wireless Network Management Interface](https://agentprime.io/advisories/CVE-2026-95704.md) `CVE-2026-95704` · CVE record: Hewlett Packard Enterprise (HPE) ArubaOS (AOS) · CVSS 7.2 High · Not analysed yet · Published 22 Oct 2026 · Tags: Broken access control - [Improper Sanitization leads to Command Injection in AOS-8 Web Interface](https://agentprime.io/advisories/CVE-2026-79956.md) `CVE-2026-79956` · CVE record: Hewlett Packard Enterprise (HPE) ArubaOS (AOS) · CVSS 7.2 High · Not analysed yet · Published 22 Oct 2026 · Tags: Command injection - [Unauthenticated Memory Corruption Vulnerability leads to Denial-of-Service in AOS-8](https://agentprime.io/advisories/CVE-2026-79955.md) `CVE-2026-79955` · CVE record: Hewlett Packard Enterprise (HPE) ArubaOS (AOS) · CVSS 7.5 High · Not analysed yet · Published 22 Oct 2026 · Tags: Memory corruption - [Unauthenticated Remote Denial-of-Service (DoS) Vulnerabilities in AOS-10](https://agentprime.io/advisories/CVE-2026-79895.md) `CVE-2026-79895` · CVE record: Hewlett Packard Enterprise (HPE) ArubaOS (AOS) · CVSS 7.5 High · Not analysed yet · Published 22 Oct 2026 · Tags: Denial of service - [Unauthenticated Denial-of-Service (DoS) Vulnerability in the PAPI Protocol of AOS-8](https://agentprime.io/advisories/CVE-2026-79894.md) `CVE-2026-79894` · CVE record: Hewlett Packard Enterprise (HPE) ArubaOS (AOS) · CVSS 7.5 High · Not analysed yet · Published 22 Oct 2026 · Tags: Denial of service - [Unauthenticated Memory Corruption Vulnerabilities lead to Denial-of-Service in AOS-10](https://agentprime.io/advisories/CVE-2026-79893.md) `CVE-2026-79893` · CVE record: Hewlett Packard Enterprise (HPE) ArubaOS (AOS) · CVSS 7.5 High · Not analysed yet · Published 22 Oct 2026 · Tags: Memory corruption - [Authenticated Local Memory Corruption Vulnerability leads to Arbitrary Code Execution in AOS-8](https://agentprime.io/advisories/CVE-2026-79892.md) `CVE-2026-79892` · CVE record: Hewlett Packard Enterprise (HPE) ArubaOS (AOS) · CVSS 7.8 High · Not analysed yet · Published 22 Oct 2026 · Tags: Memory corruption - [Unauthenticated Buffer Overflow Vulnerability leads to Remote Code Execution in AOS-8](https://agentprime.io/advisories/CVE-2026-79891.md) `CVE-2026-79891` · CVE record: Hewlett Packard Enterprise (HPE) ArubaOS (AOS) · CVSS 8.1 High · Not analysed yet · Published 22 Oct 2026 · Tags: Memory corruption - [Unauthenticated Command Injection Vulnerabilities in AOS-8 Accessed by the PAPI Protocol](https://agentprime.io/advisories/CVE-2026-79890.md) `CVE-2026-79890` · CVE record: Hewlett Packard Enterprise (HPE) ArubaOS (AOS) · CVSS 8.1 High · Not analysed yet · Published 22 Oct 2026 · Tags: Command injection - [Multiple Unauthenticated Buffer Overflow vulnerabilities in AOS-8 Web Interface result in Remote Code Execution](https://agentprime.io/advisories/CVE-2026-79889.md) `CVE-2026-79889` · CVE record: Hewlett Packard Enterprise (HPE) ArubaOS (AOS) · CVSS 8.1 High · Not analysed yet · Published 22 Oct 2026 · Tags: Memory corruption - [Unauthenticated Buffer Overflow allows Remote Code Execution in web interface](https://agentprime.io/advisories/CVE-2026-79888.md) `CVE-2026-79888` · CVE record: Hewlett Packard Enterprise (HPE) ArubaOS (AOS) · CVSS 8.1 High · Not analysed yet · Published 22 Oct 2026 · Tags: Memory corruption - [Authentication Bypass in Web Interface of AOS-8 allows Remote Command Execution (RCE)](https://agentprime.io/advisories/CVE-2026-79887.md) `CVE-2026-79887` · CVE record: Hewlett Packard Enterprise (HPE) ArubaOS (AOS) · CVSS 8.1 High · Not analysed yet · Published 22 Oct 2026 · Tags: Code injection, Authentication bypass - [Unauthenticated Buffer Overflow Vulnerability leads to Denial-of-Service in AOS-8](https://agentprime.io/advisories/CVE-2026-79886.md) `CVE-2026-79886` · CVE record: Hewlett Packard Enterprise (HPE) ArubaOS (AOS) · CVSS 8.2 High · Not analysed yet · Published 22 Oct 2026 · Tags: Memory corruption - [Unauthenticated File Write Vulnerability leads to Denial-of-Service in AOS-8](https://agentprime.io/advisories/CVE-2026-79885.md) `CVE-2026-79885` · CVE record: Hewlett Packard Enterprise (HPE) ArubaOS (AOS) · CVSS 8.2 High · Not analysed yet · Published 22 Oct 2026 · Tags: Authentication bypass - [Authentication Bypass leads to Sensitive Information Disclosure in AOS-8](https://agentprime.io/advisories/CVE-2026-79884.md) `CVE-2026-79884` · CVE record: Hewlett Packard Enterprise (HPE) ArubaOS (AOS) · CVSS 8.2 High · Not analysed yet · Published 22 Oct 2026 · Tags: Authentication bypass - [Unauthenticated Adjacent Buffer Overflow Vulnerability in the PAPI Protocol leads to Sensitive Information Disclosure in AOS-10](https://agentprime.io/advisories/CVE-2026-79883.md) `CVE-2026-79883` · CVE record: Hewlett Packard Enterprise (HPE) ArubaOS (AOS) · CVSS 8.3 High · Not analysed yet · Published 22 Oct 2026 · Tags: Memory corruption - [Unauthenticated Adjacent Command Injection Vulnerability in the PAPI Protocol of AOS-10](https://agentprime.io/advisories/CVE-2026-79882.md) `CVE-2026-79882` · CVE record: Hewlett Packard Enterprise (HPE) ArubaOS (AOS) · CVSS 8.3 High · Not analysed yet · Published 22 Oct 2026 · Tags: Command injection - [Authentication Bypass Leading to Remote Code Execution in AOS-8](https://agentprime.io/advisories/CVE-2026-79881.md) `CVE-2026-79881` · CVE record: Hewlett Packard Enterprise (HPE) ArubaOS (AOS) · CVSS 8.5 High · Not analysed yet · Published 22 Oct 2026 · Tags: Authentication bypass - [Authenticated Server-Side Request Forgery leads to Remote Code Execution in AOS-8](https://agentprime.io/advisories/CVE-2026-79880.md) `CVE-2026-79880` · CVE record: Hewlett Packard Enterprise (HPE) ArubaOS (AOS) · CVSS 8.7 High · Not analysed yet · Published 22 Oct 2026 · Tags: Server-side request forgery (SSRF) - [Unauthenticated Adjacent Memory Corruption Vulnerabilities lead to Remote Code Execution in AOS-10](https://agentprime.io/advisories/CVE-2026-79879.md) `CVE-2026-79879` · CVE record: Hewlett Packard Enterprise (HPE) ArubaOS (AOS) · CVSS 8.8 High · Not analysed yet · Published 22 Oct 2026 · Tags: Memory corruption - [Unauthenticated Adjacent Command Injection Vulnerability in the AOS-8 Command Line Interface Accessed by the PAPI Protocol](https://agentprime.io/advisories/CVE-2026-79878.md) `CVE-2026-79878` · CVE record: Hewlett Packard Enterprise (HPE) ArubaOS (AOS) · CVSS 8.8 High · Not analysed yet · Published 22 Oct 2026 · Tags: Command injection - [Unauthenticated Adjacent Remote Code Execution Vulnerability in AOS-10](https://agentprime.io/advisories/CVE-2026-79877.md) `CVE-2026-79877` · CVE record: Hewlett Packard Enterprise (HPE) ArubaOS (AOS) · CVSS 8.8 High · Not analysed yet · Published 22 Oct 2026 · Tags: Code injection - [Unauthenticated Adjacent Sensitive Information Disclosure in AOS-10 Wi-Fi Frame Processing](https://agentprime.io/advisories/CVE-2026-79876.md) `CVE-2026-79876` · CVE record: Hewlett Packard Enterprise (HPE) ArubaOS (AOS) · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 22 Oct 2026 · Tags: Information disclosure - [Authentication Bypass in the PAPI Protocol of AOS-8 Allows Unauthorized Administrative Access](https://agentprime.io/advisories/CVE-2026-79875.md) `CVE-2026-79875` · CVE record: Hewlett Packard Enterprise (HPE) ArubaOS (AOS) · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 22 Oct 2026 · Tags: Authentication bypass - [Authentication Bypass in the API allows Administrative Access of AOS-10](https://agentprime.io/advisories/CVE-2026-79874.md) `CVE-2026-79874` · CVE record: Hewlett Packard Enterprise (HPE) ArubaOS (AOS) · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 22 Oct 2026 · Tags: Authentication bypass - [Unauthenticated Adjacent Authentication Bypasses in the PAPI Protocol of AOS-10 Leads to Unauthorized Administrative Access](https://agentprime.io/advisories/CVE-2026-79873.md) `CVE-2026-79873` · CVE record: Hewlett Packard Enterprise (HPE) ArubaOS (AOS) · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 22 Oct 2026 · Tags: Authentication bypass - [Unauthenticated Buffer Overflow Vulnerability allows Remote Code Execution in AOS-10 and AOS-8](https://agentprime.io/advisories/CVE-2026-79872.md) `CVE-2026-79872` · CVE record: Hewlett Packard Enterprise (HPE) ArubaOS (AOS) · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 22 Oct 2026 · Tags: Memory corruption - [Unauthenticated Sensitive Information Disclosure in the Command Line Interface of AOS-10](https://agentprime.io/advisories/CVE-2026-79871.md) `CVE-2026-79871` · CVE record: Hewlett Packard Enterprise (HPE) ArubaOS (AOS) · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 22 Oct 2026 · Tags: Information disclosure - [Authentication Bypass leads to Unauthorized Access in AOS-8](https://agentprime.io/advisories/CVE-2026-79870.md) `CVE-2026-79870` · CVE record: Hewlett Packard Enterprise (HPE) ArubaOS (AOS) · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 22 Oct 2026 · Tags: Authentication bypass - [Authentication Bypass Leading to Remote Code Execution in AOS-10](https://agentprime.io/advisories/CVE-2026-79869.md) `CVE-2026-79869` · CVE record: Hewlett Packard Enterprise (HPE) ArubaOS (AOS) · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 22 Oct 2026 · Tags: Authentication bypass - [Authentication Bypass Vulnerabilities lead to Complete System Compromise in AOS-8](https://agentprime.io/advisories/CVE-2026-79868.md) `CVE-2026-79868` · CVE record: Hewlett Packard Enterprise (HPE) ArubaOS (AOS) · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 22 Oct 2026 · Tags: Authentication bypass - [Authentication Bypass Leading to Remote Code Execution in AOS-8](https://agentprime.io/advisories/CVE-2026-79867.md) `CVE-2026-79867` · CVE record: Hewlett Packard Enterprise (HPE) ArubaOS (AOS) · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 22 Oct 2026 · Tags: Authentication bypass - [Unauthenticated Adjacent Path Traversal Vulnerability leads to Filesystem Compromise in AOS-8](https://agentprime.io/advisories/CVE-2026-79866.md) `CVE-2026-79866` · CVE record: Hewlett Packard Enterprise (HPE) ArubaOS (AOS) · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 22 Oct 2026 · Tags: Path traversal - [Unauthenticated Adjacent Memory Corruption Vulnerability leads to Remote Code Execution in AOS-10](https://agentprime.io/advisories/CVE-2026-79865.md) `CVE-2026-79865` · CVE record: Hewlett Packard Enterprise (HPE) ArubaOS (AOS) · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 22 Oct 2026 · Tags: Memory corruption - [Unauthenticated Adjacent Command Injection Vulnerability in AOS-10](https://agentprime.io/advisories/CVE-2026-79864.md) `CVE-2026-79864` · CVE record: Hewlett Packard Enterprise (HPE) ArubaOS (AOS) · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 22 Oct 2026 · Tags: Command injection - [Unauthenticated Adjacent Buffer Overflow Vulnerabilities lead to Remote Code Execution](https://agentprime.io/advisories/CVE-2026-79863.md) `CVE-2026-79863` · CVE record: Hewlett Packard Enterprise (HPE) ArubaOS (AOS) · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 22 Oct 2026 · Tags: Memory corruption - [Unauthenticated Adjacent Buffer Overflow Vulnerabilities lead to Remote Code Execution](https://agentprime.io/advisories/CVE-2026-79862.md) `CVE-2026-79862` · CVE record: Hewlett Packard Enterprise (HPE) ArubaOS (AOS) · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 22 Oct 2026 · Tags: Memory corruption - [Unauthenticated Command Injection Vulnerability in the PAPI Protocol of AOS-10](https://agentprime.io/advisories/CVE-2026-79861.md) `CVE-2026-79861` · CVE record: Hewlett Packard Enterprise (HPE) ArubaOS (AOS) · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 22 Oct 2026 · Tags: Command injection - [Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-8](https://agentprime.io/advisories/CVE-2026-79860.md) `CVE-2026-79860` · CVE record: Hewlett Packard Enterprise (HPE) ArubaOS (AOS) · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 22 Oct 2026 · Tags: Memory corruption - [Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-8](https://agentprime.io/advisories/CVE-2026-79859.md) `CVE-2026-79859` · CVE record: Hewlett Packard Enterprise (HPE) ArubaOS (AOS) · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 22 Oct 2026 · Tags: Memory corruption - [Unauthenticated SQL Injection Vulnerability in the PAPI Protocol of AOS-8](https://agentprime.io/advisories/CVE-2026-79858.md) `CVE-2026-79858` · CVE record: Hewlett Packard Enterprise (HPE) ArubaOS (AOS) · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 22 Oct 2026 · Tags: SQL injection - [Unauthenticated Command Injection Vulnerability in AOS-8 PAPI Protocol](https://agentprime.io/advisories/CVE-2026-79857.md) `CVE-2026-79857` · CVE record: Hewlett Packard Enterprise (HPE) ArubaOS (AOS) · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 22 Oct 2026 · Tags: Command injection - [Unauthenticated Buffer Overflow Vulnerability leads to Authentication Bypass in AOS-8](https://agentprime.io/advisories/CVE-2026-79856.md) `CVE-2026-79856` · CVE record: Hewlett Packard Enterprise (HPE) ArubaOS (AOS) · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 22 Oct 2026 · Tags: Memory corruption Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .