Hewlett Packard Enterprise (HPE) ArubaOS (AOS)
105 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-95721 | 8.13.0.0 – 8.13.3.0 ; 8.10.0.0 – 8.10.0.23 | Authenticated Local Memory Corruption Vulnerability in AOS-8 Web-Based Management Interface | LOW 3.3 | 0.1 % | ||
| CVE-2026-95720 | 8.13.0.0 – 8.13.3.0 ; 8.10.0.0 – 8.10.0.23 | Authenticated Local Buffer Overflow Vulnerability leads to Denial-of-Service in AOS-8 | MEDIUM 4.4 | 0.1 % | ||
| CVE-2026-95719 | 10.8.0.0 – 10.8.1.1 ; 10.7.0.0 – 10.7.2.6 ; 10.4.0.0 – 10.4.1.13 | Authenticated Arbitrary File Deletion Vulnerability leads to Denial-of-Service in AOS-10 | MEDIUM 4.9 | 0.3 % | ||
| CVE-2026-95718 | 8.13.0.0 – 8.13.3.0 ; 8.10.0.0 – 8.10.0.23 | Authentication Bypass Vulnerability in the PAPI Protocol of AOS-8 | MEDIUM 5.3 | 0.4 % | ||
| CVE-2026-95717 | 10.8.0.0 – 10.8.1.1 ; 10.7.0.0 – 10.7.2.6 ; 10.4.0.0 – 10.4.1.13 ; … | Authenticated Stored Cross-Site Scripting (XSS) Vulnerability in AOS Web-Based Management Interface | MEDIUM 5.5 | 0.3 % | ||
| CVE-2026-95716 | 10.8.0.0 – 10.8.1.1 ; 10.7.0.0 – 10.7.2.6 ; 10.4.0.0 – 10.4.1.13 | Authentication Bypass in the PAPI Protocol of AOS-10 allows Unauthorized Configuration Changes | MEDIUM 6.5 | 0.2 % | ||
| CVE-2026-95715 | 10.8.0.0 – 10.8.1.1 ; 10.7.0.0 – 10.7.2.6 ; 10.4.0.0 – 10.4.1.13 | Unauthenticated Local Command Injection Vulnerability in AOS-10 Command Line Interface | MEDIUM 6.8 | 1.6 % | ||
| CVE-2026-95714 | 10.8.0.0 – 10.8.1.1 ; 10.7.0.0 – 10.7.2.6 ; 10.4.0.0 – 10.4.1.13 | Authenticated Adjacent Buffer Overflow Vulnerability leads to Remote Code Execution in AOS-10 | MEDIUM 6.8 | 0.3 % | ||
| CVE-2026-95713 | 8.13.0.0 – 8.13.3.0 ; 8.10.0.0 – 8.10.0.23 | Unauthenticated Buffer Overflow Vulnerability leads to Denial-of-Service in AOS-8 Command Line Interface | HIGH 7.0 | 0.3 % | ||
| CVE-2026-95712 | 8.13.0.0 – 8.13.3.0 ; 8.10.0.0 – 8.10.0.23 | Unauthenticated Adjacent Sensitive Information Disclosure and Denial-of-Service in AOS-8 via the PAPI Protocol | HIGH 7.1 | 0.2 % | ||
| CVE-2026-95711 | 10.8.0.0 – 10.8.1.1 ; 10.7.0.0 – 10.7.2.6 ; 10.4.0.0 – 10.4.1.13 | Authentication Bypass Leading to Remote Code Execution in AOS-10 Web-Based Management Interface | HIGH 7.1 | 0.2 % | ||
| CVE-2026-95710 | 10.8.0.0 – 10.8.1.1 ; 10.7.0.0 – 10.7.2.6 ; 10.4.0.0 – 10.4.1.13 ; … | Unauthenticated Adjacent Buffer Overflow Vulnerability leads to Denial-of-Service in AOS-10 or AOS-8 | HIGH 7.1 | 0.2 % | ||
| CVE-2026-95709 | 10.8.0.0 – 10.8.1.1 ; 10.7.0.0 – 10.7.2.6 ; 10.4.0.0 – 10.4.1.13 | Authenticated Command Injection Vulnerabilities in AOS-10 | HIGH 7.2 | 1.3 % | ||
| CVE-2026-95708 | 10.8.0.0 – 10.8.1.1 ; 10.7.0.0 – 10.7.2.6 ; 10.4.0.0 – 10.4.1.13 | Authenticated File Write leads to Command Injection Vulnerabilities in AOS-10 | HIGH 7.2 | 1.3 % | ||
| CVE-2026-95707 | 8.13.0.0 – 8.13.3.0 ; 8.10.0.0 – 8.10.0.23 | Authenticated Buffer Overflow Vulnerability leads to Remote Code Execution in AOS-8 | HIGH 7.2 | 0.7 % | ||
| CVE-2026-95706 | 8.13.0.0 – 8.13.3.0 ; 8.10.0.0 – 8.10.0.23 | Authenticated Command Injection Vulnerabilities in AOS-8 | HIGH 7.2 | 1.2 % | ||
| CVE-2026-95705 | 8.13.0.0 – 8.13.3.0 ; 8.10.0.0 – 8.10.0.23 | Authenticated Command Injection Vulnerabilities in AOS-8 | HIGH 7.2 | 1.2 % | ||
| CVE-2026-95704 | 10.8.0.0 – 10.8.1.1 ; 10.7.0.0 – 10.7.2.6 ; 10.4.0.0 – 10.4.1.13 ; … | Authenticated Remote Code Execution allows Unauthorized System Control in Wireless Network Management Interface | HIGH 7.2 | 0.7 % | ||
| CVE-2026-79956 | 8.13.0.0 – 8.13.3.0 ; 8.10.0.0 – 8.10.0.23 | Improper Sanitization leads to Command Injection in AOS-8 Web Interface | HIGH 7.2 | 0.7 % | ||
| CVE-2026-79955 | 8.13.0.0 – 8.13.3.0 ; 8.10.0.0 – 8.10.0.23 | Unauthenticated Memory Corruption Vulnerability leads to Denial-of-Service in AOS-8 | HIGH 7.5 | 0.5 % | ||
| CVE-2026-79895 | 10.8.0.0 – 10.8.1.1 ; 10.7.0.0 – 10.7.2.6 ; 10.4.0.0 – 10.4.1.13 | Unauthenticated Remote Denial-of-Service (DoS) Vulnerabilities in AOS-10 | HIGH 7.5 | 0.5 % | ||
| CVE-2026-79894 | 8.13.0.0 – 8.13.3.0 ; 8.10.0.0 – 8.10.0.23 | Unauthenticated Denial-of-Service (DoS) Vulnerability in the PAPI Protocol of AOS-8 | HIGH 7.5 | 0.4 % | ||
| CVE-2026-79893 | 10.8.0.0 – 10.8.1.1 ; 10.7.0.0 – 10.7.2.6 ; 10.4.0.0 – 10.4.1.13 | Unauthenticated Memory Corruption Vulnerabilities lead to Denial-of-Service in AOS-10 | HIGH 7.5 | 0.5 % | ||
| CVE-2026-79892 | 8.13.0.0 – 8.13.3.0 ; 8.10.0.0 – 8.10.0.23 | Authenticated Local Memory Corruption Vulnerability leads to Arbitrary Code Execution in AOS-8 | HIGH 7.8 | 0.2 % | ||
| CVE-2026-79891 | 8.13.0.0 – 8.13.3.0 ; 8.10.0.0 – 8.10.0.23 | Unauthenticated Buffer Overflow Vulnerability leads to Remote Code Execution in AOS-8 | HIGH 8.1 | 0.6 % | ||
| CVE-2026-79890 | 8.13.0.0 – 8.13.3.0 ; 8.10.0.0 – 8.10.0.23 | Unauthenticated Command Injection Vulnerabilities in AOS-8 Accessed by the PAPI Protocol | HIGH 8.1 | 1.0 % | ||
| CVE-2026-79889 | 8.13.0.0 – 8.13.3.0 ; 8.10.0.0 – 8.10.0.23 | Multiple Unauthenticated Buffer Overflow vulnerabilities in AOS-8 Web Interface result in Remote Code Execution | HIGH 8.1 | 0.6 % | ||
| CVE-2026-79888 | 8.13.0.0 – 8.13.3.0 ; 8.10.0.0 – 8.10.0.23 | Unauthenticated Buffer Overflow allows Remote Code Execution in web interface | HIGH 8.1 | 0.5 % | ||
| CVE-2026-79887 | 8.13.0.0 – 8.13.3.0 ; 8.10.0.0 – 8.10.0.23 | Authentication Bypass in Web Interface of AOS-8 allows Remote Command Execution (RCE) | HIGH 8.1 | 0.6 % | ||
| CVE-2026-79886 | 8.13.0.0 – 8.13.3.0 ; 8.10.0.0 – 8.10.0.23 | Unauthenticated Buffer Overflow Vulnerability leads to Denial-of-Service in AOS-8 | HIGH 8.2 | 0.4 % | ||
| CVE-2026-79885 | 8.13.0.0 – 8.13.3.0 ; 8.10.0.0 – 8.10.0.23 | Unauthenticated File Write Vulnerability leads to Denial-of-Service in AOS-8 | HIGH 8.2 | 0.4 % | ||
| CVE-2026-79884 | 8.13.0.0 – 8.13.3.0 ; 8.10.0.0 – 8.10.0.23 | Authentication Bypass leads to Sensitive Information Disclosure in AOS-8 | HIGH 8.2 | 0.2 % | ||
| CVE-2026-79883 | 10.8.0.0 – 10.8.1.1 ; 10.7.0.0 – 10.7.2.6 ; 10.4.0.0 – 10.4.1.13 | Unauthenticated Adjacent Buffer Overflow Vulnerability in the PAPI Protocol leads to Sensitive Information Disclosure in AOS-10 | HIGH 8.3 | 0.2 % | ||
| CVE-2026-79882 | 10.8.0.0 – 10.8.1.1 ; 10.7.0.0 – 10.7.2.6 ; 10.4.0.0 – 10.4.1.13 | Unauthenticated Adjacent Command Injection Vulnerability in the PAPI Protocol of AOS-10 | HIGH 8.3 | 0.8 % | ||
| CVE-2026-79881 | 8.13.0.0 – 8.13.3.0 ; 8.10.0.0 – 8.10.0.23 | Authentication Bypass Leading to Remote Code Execution in AOS-8 | HIGH 8.5 | 0.4 % | ||
| CVE-2026-79880 | 8.13.0.0 – 8.13.3.0 ; 8.10.0.0 – 8.10.0.23 | Authenticated Server-Side Request Forgery leads to Remote Code Execution in AOS-8 | HIGH 8.7 | 0.5 % | ||
| CVE-2026-79879 | 10.8.0.0 – 10.8.1.1 ; 10.7.0.0 – 10.7.2.6 ; 10.4.0.0 – 10.4.1.13 | Unauthenticated Adjacent Memory Corruption Vulnerabilities lead to Remote Code Execution in AOS-10 | HIGH 8.8 | 0.4 % | ||
| CVE-2026-79878 | 8.13.0.0 – 8.13.3.0 ; 8.10.0.0 – 8.10.0.23 | Unauthenticated Adjacent Command Injection Vulnerability in the AOS-8 Command Line Interface Accessed by the PAPI Protocol | HIGH 8.8 | 1.0 % | ||
| CVE-2026-79877 | 10.8.0.0 – 10.8.1.1 ; 10.7.0.0 – 10.7.2.6 ; 10.4.0.0 – 10.4.1.13 | Unauthenticated Adjacent Remote Code Execution Vulnerability in AOS-10 | HIGH 8.8 | 0.4 % | ||
| CVE-2026-79876 | 10.8.0.0 – 10.8.1.1 ; 10.7.0.0 – 10.7.2.6 ; 10.4.0.0 – 10.4.1.13 | Unauthenticated Adjacent Sensitive Information Disclosure in AOS-10 Wi-Fi Frame Processing | CRITICAL 9.3 | 0.2 % | ||
| CVE-2026-79875 | 8.13.0.0 – 8.13.3.0 ; 8.10.0.0 – 8.10.0.23 | Authentication Bypass in the PAPI Protocol of AOS-8 Allows Unauthorized Administrative Access | CRITICAL 9.3 | 0.2 % | ||
| CVE-2026-79874 | 10.8.0.0 – 10.8.1.1 ; 10.7.0.0 – 10.7.2.6 ; 10.4.0.0 – 10.4.1.13 | Authentication Bypass in the API allows Administrative Access of AOS-10 | CRITICAL 9.3 | 0.2 % | ||
| CVE-2026-79873 | 10.8.0.0 – 10.8.1.1 ; 10.7.0.0 – 10.7.2.6 ; 10.4.0.0 – 10.4.1.13 | Unauthenticated Adjacent Authentication Bypasses in the PAPI Protocol of AOS-10 Leads to Unauthorized Administrative Access | CRITICAL 9.3 | 0.2 % | ||
| CVE-2026-79872 | 10.8.0.0 – 10.8.1.1 ; 10.7.0.0 – 10.7.2.6 ; 10.4.0.0 – 10.4.1.13 ; … | Unauthenticated Buffer Overflow Vulnerability allows Remote Code Execution in AOS-10 and AOS-8 | CRITICAL 9.4 | 0.6 % | ||
| CVE-2026-79871 | 10.8.0.0 – 10.8.1.1 ; 10.7.0.0 – 10.7.2.6 ; 10.4.0.0 – 10.4.1.13 | Unauthenticated Sensitive Information Disclosure in the Command Line Interface of AOS-10 | CRITICAL 9.6 | 0.3 % | ||
| CVE-2026-79870 | 8.13.0.0 – 8.13.3.0 ; 8.10.0.0 – 8.10.0.23 | Authentication Bypass leads to Unauthorized Access in AOS-8 | CRITICAL 9.6 | 0.3 % | ||
| CVE-2026-79869 | 10.8.0.0 – 10.8.1.1 ; 10.7.0.0 – 10.7.2.6 ; 10.4.0.0 – 10.4.1.13 | Authentication Bypass Leading to Remote Code Execution in AOS-10 | CRITICAL 9.6 | 0.3 % | ||
| CVE-2026-79868 | 8.13.0.0 – 8.13.3.0 ; 8.10.0.0 – 8.10.0.23 | Authentication Bypass Vulnerabilities lead to Complete System Compromise in AOS-8 | CRITICAL 9.6 | 0.3 % | ||
| CVE-2026-79867 | 8.13.0.0 – 8.13.3.0 ; 8.10.0.0 – 8.10.0.23 | Authentication Bypass Leading to Remote Code Execution in AOS-8 | CRITICAL 9.6 | 0.3 % | ||
| CVE-2026-79866 | 8.13.0.0 – 8.13.3.0 ; 8.10.0.0 – 8.10.0.23 | Unauthenticated Adjacent Path Traversal Vulnerability leads to Filesystem Compromise in AOS-8 | CRITICAL 9.6 | 0.3 % | ||
| CVE-2026-79865 | 10.8.0.0 – 10.8.1.1 ; 10.7.0.0 – 10.7.2.6 ; 10.4.0.0 – 10.4.1.13 | Unauthenticated Adjacent Memory Corruption Vulnerability leads to Remote Code Execution in AOS-10 | CRITICAL 9.6 | 0.4 % | ||
| CVE-2026-79864 | 10.8.0.0 – 10.8.1.1 ; 10.7.0.0 – 10.7.2.6 ; 10.4.0.0 – 10.4.1.13 | Unauthenticated Adjacent Command Injection Vulnerability in AOS-10 | CRITICAL 9.6 | 1.5 % | ||
| CVE-2026-79863 | 10.8.0.0 – 10.8.1.1 ; 10.7.0.0 – 10.7.2.6 ; 10.4.0.0 – 10.4.1.13 ; … | Unauthenticated Adjacent Buffer Overflow Vulnerabilities lead to Remote Code Execution | CRITICAL 9.6 | 0.3 % | ||
| CVE-2026-79862 | 10.8.0.0 – 10.8.1.1 ; 10.7.0.0 – 10.7.2.6 ; 10.4.0.0 – 10.4.1.13 ; … | Unauthenticated Adjacent Buffer Overflow Vulnerabilities lead to Remote Code Execution | CRITICAL 9.6 | 0.3 % | ||
| CVE-2026-79861 | 10.8.0.0 – 10.8.1.1 ; 10.7.0.0 – 10.7.2.6 ; 10.4.0.0 – 10.4.1.13 | Unauthenticated Command Injection Vulnerability in the PAPI Protocol of AOS-10 | CRITICAL 9.8 | 1.7 % | ||
| CVE-2026-79860 | 8.13.0.0 – 8.13.3.0 ; 8.10.0.0 – 8.10.0.23 | Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-8 | CRITICAL 9.8 | 0.7 % | ||
| CVE-2026-79859 | 8.13.0.0 – 8.13.3.0 ; 8.10.0.0 – 8.10.0.23 | Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-8 | CRITICAL 9.8 | 0.7 % | ||
| CVE-2026-79858 | 8.13.0.0 – 8.13.3.0 ; 8.10.0.0 – 8.10.0.23 | Unauthenticated SQL Injection Vulnerability in the PAPI Protocol of AOS-8 | CRITICAL 9.8 | 0.5 % | ||
| CVE-2026-79857 | 8.13.0.0 – 8.13.3.0 ; 8.10.0.0 – 8.10.0.23 | Unauthenticated Command Injection Vulnerability in AOS-8 PAPI Protocol | CRITICAL 9.8 | 1.4 % | ||
| CVE-2026-79856 | 8.13.0.0 – 8.13.3.0 ; 8.10.0.0 – 8.10.0.23 | Unauthenticated Buffer Overflow Vulnerability leads to Authentication Bypass in AOS-8 | CRITICAL 9.8 | 0.6 % | ||
| CVE-2026-79855 | 8.13.0.0 – 8.13.3.0 ; 8.10.0.0 – 8.10.0.23 | Authentication Bypass in the SSH Daemon of AOS-8 leads to Complete System Compromise | CRITICAL 9.8 | 0.8 % | ||
| CVE-2026-79854 | 10.8.0.0 – 10.8.1.1 ; 10.7.0.0 – 10.7.2.6 ; 10.4.0.0 – 10.4.1.13 | Unauthenticated SQL Injection Vulnerability leads to Remote Code Execution in AOS-10 | CRITICAL 9.8 | 0.6 % | ||
| CVE-2026-79853 | 10.8.0.0 – 10.8.1.1 ; 10.7.0.0 – 10.7.2.6 ; 10.4.0.0 – 10.4.1.13 | Unauthenticated Sensitive Information Disclosure leads to Remote Code Execution in AOS-10 | CRITICAL 9.8 | 0.7 % | ||
| CVE-2026-79852 | 10.8.0.0 – 10.8.1.1 ; 10.7.0.0 – 10.7.2.6 ; 10.4.0.0 – 10.4.1.13 ; … | Unauthenticated SQL Injection allows Remote Code Execution in AOS Web-Based Management Interface | CRITICAL 9.8 | 0.6 % | ||
| CVE-2026-79851 | 10.8.0.0 – 10.8.1.1 ; 10.7.0.0 – 10.7.2.6 ; 10.4.0.0 – 10.4.1.13 | Unauthenticated Buffer Overflow Vulnerability leads to Remote Code Execution in AOS-10 | CRITICAL 10.0 | 0.8 % | ||
| CVE-2026-79850 | 8.13.0.0 – 8.13.3.0 ; 8.10.0.0 – 8.10.0.23 | Authentication Bypass Leading to Remote Code Execution in AOS-8 | CRITICAL 10.0 | 0.7 % | ||
| CVE-2026-79849 | 8.13.0.0 – 8.13.3.0 ; 8.10.0.0 – 8.10.0.23 | Unauthenticated SQL Injection Vulnerabilities allow Remote Code Execution in AOS-8 | CRITICAL 10.0 | 0.7 % | ||
| CVE-2026-79848 | 8.13.0.0 – 8.13.3.0 ; 8.10.0.0 – 8.10.0.23 | Unauthenticated SQL Injection Vulnerabilities allow Remote Code Execution in AOS-8 | CRITICAL 10.0 | 0.7 % | ||
| CVE-2026-79847 | 10.8.0.0 – 10.8.1.1 ; 10.7.0.0 – 10.7.2.6 ; 10.4.0.0 – 10.4.1.13 | Unauthenticated Buffer Overflow Vulnerabilities leads to Remote Code Execution in AOS-10 | CRITICAL 10.0 | 0.8 % | ||
| CVE-2026-79846 | 8.13.0.0 – 8.13.3.0 ; 8.10.0.0 – 8.10.0.23 | Unauthenticated Command Injection Vulnerabilities in AOS-8 | CRITICAL 10.0 | 1.6 % | ||
| CVE-2026-79844 | 10.8.0.0 – 10.8.1.1 ; 10.7.0.0 – 10.7.2.6 ; 10.4.0.0 – 10.4.1.13 | Authentication Bypass Leading to Remote Code Execution in AOS-10 | CRITICAL 10.0 | 0.7 % | ||
| CVE-2026-23823 | 10.8.0.0 ; 10.7.0.0 – 10.7.2.2 | Authenticated Command Injection leads to RCE in AOS-10 CLI Command | HIGH 7.2 | 1.0 % | ||
| CVE-2026-23822 | 8.13.0.0 – 8.13.1.1 ; 8.12.0.0 – 8.12.0.6 ; 8.10.0.0 – 8.10.0.21 | Unauthenticated XML External Entity Injection in AOS-8 Instant allows Denial of Service | MEDIUM 5.3 | 0.3 % | ||
| CVE-2026-23821 | 10.8.0.0 ; 10.7.0.0 – 10.7.2.2 ; 10.4.0.0 – 10.4.1.10 | Inconsistent input filtering allows Authenticated Command Injection in AOS-10 CLI | HIGH 7.2 | 0.6 % | ||
| CVE-2026-23820 | 10.8.0.0 ; 10.7.0.0 – 10.7.2.2 ; 10.4.0.0 – 10.4.1.10 ; … | Inconsistent input filtering allows Authenticated Command Injection in AOS-8 Instant and AOS-10 CLI | HIGH 7.2 | 0.6 % | ||
| CVE-2026-23819 | 10.8.0.0 ; 10.7.0.0 – 10.7.2.2 ; 10.4.0.0 – 10.4.1.10 ; … | Error in SSID Processing allows Stored XSS in Web Management Interface | HIGH 8.8 | 0.3 % | ||
| CVE-2025-37179 | 8.12.0.0 – 8.13.1.0 ; 8.10.0.0 – 8.10.0.20 | Out-of-Bounds Read Vulnerabilities Leading to Process Crash in AOS-8 Operating System | MEDIUM 5.3 | 0.4 % | ||
| CVE-2025-37178 | 8.12.0.0 – 8.13.1.0 ; 8.10.0.0 – 8.10.0.20 | Out-of-Bounds Read Vulnerabilities Leading to Process Crash in AOS-8 Operating System | HIGH 7.5 | 0.4 % | ||
| CVE-2025-37177 | 10.6.0.0 – 10.7.2.1 ; 10.3.0.0 – 10.4.1.9 ; 8.12.0.0 – 8.13.1.0 ; … | Authenticated Arbitrary File Deletion Vulnerability in AOS-10 or AOS-8 Command Line Interface (CLI) | MEDIUM 6.5 | 0.4 % | ||
| CVE-2025-37176 | 8.12.0.0 – 8.13.1.0 ; 8.10.0.0 – 8.10.0.20 | Authenticated Command Injection Vulnerability in an AOS-8 operating system's internal workflow | HIGH 7.2 | 1.4 % | ||
| CVE-2025-37175 | 10.6.0.0 – 10.7.2.1 ; 10.3.0.0 – 10.4.1.9 ; 8.12.0.0 – 8.13.1.0 ; … | Authenticated Arbitrary File Upload Vulnerability in AOS-10 or AOS-8 Web-Based Management Interface | HIGH 7.2 | 0.5 % | ||
| CVE-2025-37174 | 10.6.0.0 – 10.7.2.1 ; 10.3.0.0 – 10.4.1.9 ; 8.12.0.0 – 8.13.1.0 ; … | Authenticated Arbitrary File Write Vulnerability in AOS 10 and AOS-8 Web-Based Management Interface | HIGH 7.2 | 0.6 % | ||
| CVE-2025-37173 | 10.6.0.0 – 10.7.2.1 ; 10.3.0.0 – 10.4.1.9 ; 8.12.0.0 – 8.13.1.0 ; … | Improper Input Handling Vulnerability in Authenticated Configuration API Endpoint (AOS-10/AOS-8 Web UI) | HIGH 7.2 | 0.4 % | ||
| CVE-2025-37172 | 8.12.0.0 – 8.13.1.0 ; 8.10.0.0 – 8.10.0.20 | Authenticated Command Injection Vulnerabilities in AOS-8 Web-Based Management Interface | HIGH 7.2 | 1.3 % | ||
| CVE-2025-37171 | 8.12.0.0 – 8.13.1.0 ; 8.10.0.0 – 8.10.0.20 | Authenticated Command Injection Vulnerabilities in AOS-8 Web-Based Management Interface | HIGH 7.2 | 1.4 % | ||
| CVE-2025-37170 | 8.12.0.0 – 8.13.1.0 ; 8.10.0.0 – 8.10.0.20 | Authenticated Command Injection Vulnerabilities in AOS-8 Web-Based Management Interface | HIGH 7.2 | 1.3 % | ||
| CVE-2025-37169 | 10.6.0.0 – 10.7.2.1 ; 10.3.0.0 – 10.4.1.9 | Stack Overflow Vulnerability in AOS-10 Web-Based Management Interface | HIGH 7.2 | 0.6 % | ||
| CVE-2025-37168 | 8.12.0.0 – 8.13.1.0 ; 8.10.0.0 – 8.10.0.20 | Unauthenticated Arbitrary File Deletion Vulnerability in AOS-8 Operating System | CRITICAL 9.1 | 0.5 % | ||
| CVE-2025-37145 | 10.7.0.0 – 10.7.1.1 ; 10.4.0.0 – 10.4.1.8 ; 8.13.0.0 – 8.13.0.1 ; … | Authenticated Arbitrary File Download Vulnerabilities in a Low-Level Interface Library Affecting AOS-10 GW and AOS-8 Controller/Mobility … | MEDIUM 4.9 | 0.4 % | ||
| CVE-2025-37144 | 10.7.0.0 – 10.7.1.1 ; 10.4.0.0 – 10.4.1.8 ; 8.13.0.0 – 8.13.0.1 ; … | Authenticated Arbitrary File Download Vulnerabilities in a Low-Level Interface Library Affecting AOS-10 GW and AOS-8 Controller/Mobility … | MEDIUM 4.9 | 0.4 % | ||
| CVE-2025-37143 | 10.7.0.0 – 10.7.1.1 ; 10.4.0.0 – 10.4.1.8 ; 8.13.0.0 – 8.13.0.1 ; … | Authenticated Arbitrary File Download Vulnerability in CLI Binary of AOS-10 GW and AOS-8 Controller/Mobility Conductor Web Interface (Phy… | MEDIUM 4.9 | 0.4 % | ||
| CVE-2025-37142 | 10.7.0.0 – 10.7.1.1 ; 10.4.0.0 – 10.4.1.8 ; 8.13.0.0 – 8.13.0.1 ; … | Authenticated Arbitrary File Download Vulnerabilities in CLI Binary of AOS-8 Controller/Mobility Conductor Web-Based Management Interface | MEDIUM 4.9 | 0.4 % | ||
| CVE-2025-37141 | 10.7.0.0 – 10.7.1.1 ; 10.4.0.0 – 10.4.1.8 ; 8.13.0.0 – 8.13.0.1 ; … | Authenticated Arbitrary File Download Vulnerabilities in CLI Binary of AOS-8 Controller/Mobility Conductor Web-Based Management Interface | MEDIUM 4.9 | 0.4 % | ||
| CVE-2025-37140 | 10.7.0.0 – 10.7.1.1 ; 10.4.0.0 – 10.4.1.8 ; 8.13.0.0 – 8.13.0.1 ; … | Authenticated Arbitrary File Download Vulnerabilities in CLI Binary of AOS-8 Controller/Mobility Conductor Web-Based Management Interface | MEDIUM 4.9 | 0.4 % | ||
| CVE-2025-37139 | 10.7.0.0 – 10.7.1.1 ; 10.4.0.0 – 10.4.1.8 ; 8.13.0.0 – 8.13.0.1 ; … | Vulnerability in AOS firmware allows for Authenticated Local malicious actor to Permanently Disable Boot | MEDIUM 6.0 | 0.1 % | ||
| CVE-2025-37138 | 10.7.0.0 – 10.7.1.1 ; 10.4.0.0 – 10.4.1.8 ; 8.13.0.0 – 8.13.0.1 ; … | Authenticated Command Injection Vulnerability in CLI Binary of AOS-10 GW and AOS-8 Controller/Mobility Conductor Web-Based Management Int… | MEDIUM 6.2 | 1.2 % | ||
| CVE-2025-37137 | 10.7.0.0 – 10.7.1.1 ; 10.4.0.0 – 10.4.1.8 ; 8.13.0.0 – 8.13.0.1 ; … | Authenticated Arbitrary File Deletion Vulnerabilities in AOS-8 Controller/Mobility Conductor Command Line Interface (CLI) | MEDIUM 6.5 | 0.4 % | ||
| CVE-2025-37136 | 10.7.0.0 – 10.7.1.1 ; 10.4.0.0 – 10.4.1.8 ; 8.13.0.0 – 8.13.0.1 ; … | Authenticated Arbitrary File Deletion Vulnerabilities in AOS-8 Controller/Mobility Conductor Command Line Interface (CLI) | MEDIUM 6.5 | 0.4 % | ||
| CVE-2025-37135 | 10.7.0.0 – 10.7.1.1 ; 10.4.0.0 – 10.4.1.8 ; 8.13.0.0 – 8.13.0.1 ; … | Authenticated Arbitrary File Deletion Vulnerabilities in AOS-8 Controller/Mobility Conductor Command Line Interface (CLI) | MEDIUM 6.5 | 0.4 % | ||
| CVE-2025-37134 | 10.7.0.0 – 10.7.1.1 ; 10.4.0.0 – 10.4.1.8 ; 8.13.0.0 – 8.13.0.1 ; … | Authenticated Command Injection Vulnerability in the Low-Level Interface Library Affecting AOS-10 GW and AOS-8 Controller/Mobility Conduc… | HIGH 7.2 | 1.2 % | ||
| CVE-2025-37133 | 10.7.0.0 – 10.7.1.1 ; 10.4.0.0 – 10.4.1.8 ; 8.13.0.0 – 8.13.0.1 ; … | Authenticated Command Injection Vulnerability in AOS-8 Controller/Mobility Conductor Web-Based Management Interface via the CLI Binaryalo… | HIGH 7.2 | 1.2 % | ||
| CVE-2025-37132 | 10.7.0.0 – 10.7.1.1 ; 10.4.0.0 – 10.4.1.8 ; 8.13.0.0 – 8.13.0.1 ; … | Authenticated Remote Code Execution Vulnerability in AOS-10 GW and AOS-8 Controller/Mobility Conductor Web-Based Management Interface via… | HIGH 7.2 | 0.5 % | ||
| CVE-2025-37148 | 10.7.0.0 – 10.7.1.1 ; 10.4.0.0 – 10.4.1.8 ; 8.13.0.0 – 8.13.0.1 ; … | Kernel Panic triggered by Modified Ethernet Frames leads to Denial of Service Vulnerability | MEDIUM 6.5 | 0.3 % | ||
| CVE-2025-37147 | 10.7.0.0 – 10.7.1.1 ; 10.4.0.0 – 10.4.1.8 ; 8.13.0.0 – 8.13.0.1 ; … | Secure Boot Bypass allows for Compromise of Hardware Root of Trust | HIGH 7.1 | 0.2 % | ||
| CVE-2025-37146 | 10.7.0.0 – 10.7.1.1 ; 10.4.0.0 – 10.4.1.8 ; 8.13.0.0 – 8.13.0.1 ; … | Unauthorized Filesystem Operations in System Firmware allow Authenticated Remote Code Execution | HIGH 7.2 | 0.9 % |