# Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS).

Every CVE that names Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS) among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Authenticated Command Injection Vulnerabilities in Command Line Interface (CLI) Service Accessed by PAPI Protocol of AOS-8 and AOS-10 Operating Systems](https://agentprime.io/advisories/CVE-2026-44871.md)
  `CVE-2026-44871` · CVE record: Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS) · CVSS 7.2 High · Not analysed yet · Published 12 May 2026 · Tags: Command injection
- [Insufficient Session Invalidation on User Account Deactivation in AOS-8 Operating System](https://agentprime.io/advisories/CVE-2026-44873.md)
  `CVE-2026-44873` · CVE record: Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS) · CVSS 5.4 Medium · Not analysed yet · Published 12 May 2026 · Tags: Authentication bypass
- [Authenticated Arbitrary File Download via AOS-10 Web-Based Management Interface](https://agentprime.io/advisories/CVE-2026-44874.md)
  `CVE-2026-44874` · CVE record: Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS) · CVSS 4.9 Medium · Not analysed yet · Published 12 May 2026 · Tags: Broken access control
- [Authenticated Arbitrary File Upload via Command Injection in AOS-8 AND AOS-10 Web-Based Management Interface](https://agentprime.io/advisories/CVE-2026-44872.md)
  `CVE-2026-44872` · CVE record: Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS) · CVSS 7.2 High · Not analysed yet · Published 12 May 2026 · Tags: Command injection
- [Authenticated Command Injection Vulnerabilities in Command Line Interface (CLI) Service Accessed by PAPI Protocol of AOS-8 and AOS-10 Operating Systems](https://agentprime.io/advisories/CVE-2026-44870.md)
  `CVE-2026-44870` · CVE record: Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS) · CVSS 7.2 High · Not analysed yet · Published 12 May 2026 · Tags: Command injection
- [Authenticated Command Injection Vulnerabilities in the Web-Based Management Interface of AOS-8 and AOS-10](https://agentprime.io/advisories/CVE-2026-44869.md)
  `CVE-2026-44869` · CVE record: Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS) · CVSS 7.2 High · Not analysed yet · Published 12 May 2026 · Tags: Command injection
- [Authenticated Command Injection Vulnerabilities in the Web-Based Management Interface of AOS-8 and AOS-10](https://agentprime.io/advisories/CVE-2026-44868.md)
  `CVE-2026-44868` · CVE record: Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS) · CVSS 7.2 High · Not analysed yet · Published 12 May 2026 · Tags: Command injection
- [Authenticated Command Injection Vulnerabilities in the Web-Based Management Interface of AOS-8 and AOS-10](https://agentprime.io/advisories/CVE-2026-44867.md)
  `CVE-2026-44867` · CVE record: Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS) · CVSS 7.2 High · Not analysed yet · Published 12 May 2026 · Tags: Command injection
- [Authenticated Command Injection Vulnerabilities in the Web-Based Management Interface of AOS-8 and AOS-10](https://agentprime.io/advisories/CVE-2026-44866.md)
  `CVE-2026-44866` · CVE record: Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS) · CVSS 7.2 High · Not analysed yet · Published 12 May 2026 · Tags: Command injection
- [Authenticated Command Injection Vulnerabilities in the Web-Based Management Interface of AOS-8 and AOS-10](https://agentprime.io/advisories/CVE-2026-44865.md)
  `CVE-2026-44865` · CVE record: Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS) · CVSS 7.2 High · Not analysed yet · Published 12 May 2026 · Tags: Command injection
- [Authenticated Remote Code Execution via SQL Injection in AOS-8 and AOS-10 Operating Systems](https://agentprime.io/advisories/CVE-2026-44864.md)
  `CVE-2026-44864` · CVE record: Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS) · CVSS 7.2 High · Not analysed yet · Published 12 May 2026 · Tags: SQL injection
- [Authenticated Remote Code Execution via SQL Injection in AOS-8 and AOS-10 Operating Systems](https://agentprime.io/advisories/CVE-2026-44863.md)
  `CVE-2026-44863` · CVE record: Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS) · CVSS 7.2 High · Not analysed yet · Published 12 May 2026 · Tags: SQL injection
- [Authenticated Remote Code Execution via SQL Injection in AOS-8 and AOS-10 Operating Systems](https://agentprime.io/advisories/CVE-2026-44862.md)
  `CVE-2026-44862` · CVE record: Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS) · CVSS 7.2 High · Not analysed yet · Published 12 May 2026 · Tags: SQL injection
- [Authenticated Remote Code Execution via SQL Injection in AOS-8 and AOS-10 Operating Systems](https://agentprime.io/advisories/CVE-2026-44861.md)
  `CVE-2026-44861` · CVE record: Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS) · CVSS 7.2 High · Not analysed yet · Published 12 May 2026 · Tags: SQL injection
- [Authenticated Remote Code Execution via SQL Injection in AOS-8 and AOS-10 Operating Systems](https://agentprime.io/advisories/CVE-2026-44860.md)
  `CVE-2026-44860` · CVE record: Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS) · CVSS 7.2 High · Not analysed yet · Published 12 May 2026 · Tags: SQL injection
- [Authenticated Stack-Based Buffer Overflow in PAPI Services](https://agentprime.io/advisories/CVE-2026-44859.md)
  `CVE-2026-44859` · CVE record: Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS) · CVSS 7.2 High · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Authenticated Stack-Based Buffer Overflow in PAPI Services](https://agentprime.io/advisories/CVE-2026-44858.md)
  `CVE-2026-44858` · CVE record: Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS) · CVSS 7.2 High · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Authenticated Stack-Based Buffer Overflow in PAPI Services](https://agentprime.io/advisories/CVE-2026-44857.md)
  `CVE-2026-44857` · CVE record: Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS) · CVSS 7.2 High · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Authenticated Stack-Based Buffer Overflow in PAPI Services](https://agentprime.io/advisories/CVE-2026-44856.md)
  `CVE-2026-44856` · CVE record: Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS) · CVSS 7.2 High · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Authenticated Stack-Based Buffer Overflow in PAPI Services](https://agentprime.io/advisories/CVE-2026-44855.md)
  `CVE-2026-44855` · CVE record: Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS) · CVSS 7.2 High · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Authenticated Remote Code Execution via Arbitrary File Write in AOS-8 and AOS-10 Web-Based Management Interface](https://agentprime.io/advisories/CVE-2026-44854.md)
  `CVE-2026-44854` · CVE record: Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS) · CVSS 7.2 High · Not analysed yet · Published 12 May 2026 · Tags: Command injection
- [Authenticated Remote Code Execution via Arbitrary File Write in AOS-8 and AOS-10 Web-Based Management Interface](https://agentprime.io/advisories/CVE-2026-44853.md)
  `CVE-2026-44853` · CVE record: Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS) · CVSS 7.2 High · Not analysed yet · Published 12 May 2026 · Tags: Command injection
- [Authenticated Remote Code Execution via Arbitrary File Overwrite in the AOS-8 and AOS-10 Web-Based Management Interface](https://agentprime.io/advisories/CVE-2026-44852.md)
  `CVE-2026-44852` · CVE record: Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS) · CVSS 7.2 High · Not analysed yet · Published 12 May 2026 · Tags: CWE-296
- [Unauthenticated Remote Code Execution via Heap Buffer Overflow in Network Management Service](https://agentprime.io/advisories/CVE-2026-23827.md)
  `CVE-2026-23827` · CVE record: Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS) · CVSS 7.5 High · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Unauthenticated Denial of Service in AOS-8 Network Management Service](https://agentprime.io/advisories/CVE-2026-23826.md)
  `CVE-2026-23826` · CVE record: Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS) · CVSS 7.5 High · Not analysed yet · Published 12 May 2026 · Tags: Denial of service
- [Unauthenticated Denial-of-Service via Crafted Messages in a Network Protocol Handling Component](https://agentprime.io/advisories/CVE-2026-23825.md)
  `CVE-2026-23825` · CVE record: Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS) · CVSS 7.5 High · Not analysed yet · Published 12 May 2026 · Tags: CWE-20
- [Unauthenticated Denial-of-Service via Crafted Messages in a Network Protocol Handling Component](https://agentprime.io/advisories/CVE-2026-23824.md)
  `CVE-2026-23824` · CVE record: Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS) · CVSS 7.5 High · Not analysed yet · Published 12 May 2026 · Tags: Denial of service
- [MAC Address Spoofing leads to Inter-BSSID Isolation Bypass Resulting in Traffic Redirection](https://agentprime.io/advisories/CVE-2026-23809.md)
  `CVE-2026-23809` · CVE record: Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS-10 & AOS-8) · CVSS 5.4 Medium · Not analysed yet · Published 4 Mar 2026 · Tags: Denial of service
- [Client Isolation Bypass via GTK Manipulation](https://agentprime.io/advisories/CVE-2026-23808.md)
  `CVE-2026-23808` · CVE record: Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS-10 & AOS-8) · CVSS 5.4 Medium · Not analysed yet · Published 4 Mar 2026 · Tags: Code injection
- [Frame Injection via Shared GTK Allows Traffic Spoofing and Client Compromise](https://agentprime.io/advisories/CVE-2026-23601.md)
  `CVE-2026-23601` · CVE record: Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS-10 & AOS-8) · CVSS 5.4 Medium · Not analysed yet · Published 4 Mar 2026 · Tags: Weak cryptography or TLS

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=hewlett-packard-enterprise-hpe-hpe-aruba-networking-wireless-operating-system-ao>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/hewlett-packard-enterprise-hpe-hpe-aruba-networking-wireless-operating-system-ao/>. Everything for agents: <https://agentprime.io/llms.txt>.