Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS)
27 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-44871 | 8.13.0.0 – 8.13.1.1 ; 8.12.0.0 – 8.12.0.6 ; 8.10.0.0 – 8.10.0.21 ; … | Authenticated Command Injection Vulnerabilities in Command Line Interface (CLI) Service Accessed by PAPI Protocol of AOS-8 and AOS-10 Ope… | HIGH 8.8 | 1.2 % | ||
| CVE-2026-44873 | 8.13.0.0 – 8.13.1.1 ; 8.12.0.0 – 8.12.0.6 ; 8.10.0.0 – 8.10.0.21 | Insufficient Session Invalidation on User Account Deactivation in AOS-8 Operating System | MEDIUM 5.4 | 0.1 % | ||
| CVE-2026-44874 | 10.7.0.0 – 10.7.2.2 ; 10.8.0.0 ; 10.4.0.0 – 10.4.1.10 | Authenticated Arbitrary File Download via AOS-10 Web-Based Management Interface | MEDIUM 4.9 | 0.3 % | ||
| CVE-2026-44872 | 8.13.0.0 – 8.13.1.1 ; 8.12.0.0 – 8.12.0.6 ; 8.10.0.0 – 8.10.0.21 ; … | Authenticated Arbitrary File Upload via Command Injection in AOS-8 AND AOS-10 Web-Based Management Interface | HIGH 7.2 | 0.8 % | ||
| CVE-2026-44870 | 8.13.0.0 – 8.13.1.1 ; 8.12.0.0 – 8.12.0.6 ; 8.10.0.0 – 8.10.0.21 ; … | Authenticated Command Injection Vulnerabilities in Command Line Interface (CLI) Service Accessed by PAPI Protocol of AOS-8 and AOS-10 Ope… | HIGH 8.8 | 0.9 % | ||
| CVE-2026-44869 | 8.13.0.0 – 8.13.1.1 ; 8.12.0.0 – 8.12.0.6 ; 8.10.0.0 – 8.10.0.21 ; … | Authenticated Command Injection Vulnerabilities in the Web-Based Management Interface of AOS-8 and AOS-10 | HIGH 8.8 | 0.9 % | ||
| CVE-2026-44868 | 8.13.0.0 – 8.13.1.1 ; 8.12.0.0 – 8.12.0.6 ; 8.10.0.0 – 8.10.0.21 ; … | Authenticated Command Injection Vulnerabilities in the Web-Based Management Interface of AOS-8 and AOS-10 | HIGH 8.8 | 0.9 % | ||
| CVE-2026-44867 | 8.13.0.0 – 8.13.1.1 ; 8.12.0.0 – 8.12.0.6 ; 8.10.0.0 – 8.10.0.21 ; … | Authenticated Command Injection Vulnerabilities in the Web-Based Management Interface of AOS-8 and AOS-10 | HIGH 8.8 | 0.9 % | ||
| CVE-2026-44866 | 8.13.0.0 – 8.13.1.1 ; 8.12.0.0 – 8.12.0.6 ; 8.10.0.0 – 8.10.0.21 ; … | Authenticated Command Injection Vulnerabilities in the Web-Based Management Interface of AOS-8 and AOS-10 | HIGH 8.8 | 0.9 % | ||
| CVE-2026-44865 | 8.13.0.0 – 8.13.1.1 ; 8.12.0.0 – 8.12.0.6 ; 8.10.0.0 – 8.10.0.21 ; … | Authenticated Command Injection Vulnerabilities in the Web-Based Management Interface of AOS-8 and AOS-10 | HIGH 7.2 | 0.9 % | ||
| CVE-2026-44864 | 8.13.0.0 – 8.13.1.1 ; 8.12.0.0 – 8.12.0.6 ; 8.10.0.0 – 8.10.0.21 ; … | Authenticated Remote Code Execution via SQL Injection in AOS-8 and AOS-10 Operating Systems | HIGH 7.2 | 0.3 % | ||
| CVE-2026-44863 | 8.13.0.0 – 8.13.1.1 ; 8.12.0.0 – 8.12.0.6 ; 8.10.0.0 – 8.10.0.21 ; … | Authenticated Remote Code Execution via SQL Injection in AOS-8 and AOS-10 Operating Systems | HIGH 7.2 | 0.3 % | ||
| CVE-2026-44862 | 8.13.0.0 – 8.13.1.1 ; 8.12.0.0 – 8.12.0.6 ; 8.10.0.0 – 8.10.0.21 ; … | Authenticated Remote Code Execution via SQL Injection in AOS-8 and AOS-10 Operating Systems | HIGH 7.2 | 0.3 % | ||
| CVE-2026-44861 | 8.13.0.0 – 8.13.1.1 ; 8.12.0.0 – 8.12.0.6 ; 8.10.0.0 – 8.10.0.21 ; … | Authenticated Remote Code Execution via SQL Injection in AOS-8 and AOS-10 Operating Systems | HIGH 7.2 | 0.3 % | ||
| CVE-2026-44860 | 8.13.0.0 – 8.13.1.1 ; 8.12.0.0 – 8.12.0.6 ; 8.10.0.0 – 8.10.0.21 ; … | Authenticated Remote Code Execution via SQL Injection in AOS-8 and AOS-10 Operating Systems | HIGH 7.2 | 0.3 % | ||
| CVE-2026-44859 | 8.13.0.0 – 8.13.1.1 ; 8.12.0.0 – 8.12.0.6 ; 8.10.0.0 – 8.10.0.21 ; … | Authenticated Stack-Based Buffer Overflow in PAPI Services | HIGH 7.2 | 0.4 % | ||
| CVE-2026-44858 | 8.13.0.0 – 8.13.1.1 ; 8.12.0.0 – 8.12.0.6 ; 8.10.0.0 – 8.10.0.21 ; … | Authenticated Stack-Based Buffer Overflow in PAPI Services | HIGH 7.2 | 0.4 % | ||
| CVE-2026-44857 | 8.13.0.0 – 8.13.1.1 ; 8.12.0.0 – 8.12.0.6 ; 8.10.0.0 – 8.10.0.21 ; … | Authenticated Stack-Based Buffer Overflow in PAPI Services | HIGH 7.2 | 0.4 % | ||
| CVE-2026-44856 | 8.13.0.0 – 8.13.1.1 ; 8.12.0.0 – 8.12.0.6 ; 8.10.0.0 – 8.10.0.21 ; … | Authenticated Stack-Based Buffer Overflow in PAPI Services | HIGH 7.2 | 0.4 % | ||
| CVE-2026-44855 | 8.13.0.0 – 8.13.1.1 ; 8.12.0.0 – 8.12.0.6 ; 8.10.0.0 – 8.10.0.21 ; … | Authenticated Stack-Based Buffer Overflow in PAPI Services | HIGH 7.2 | 0.4 % | ||
| CVE-2026-44854 | 8.13.0.0 – 8.13.1.1 ; 8.12.0.0 – 8.12.0.6 ; 8.10.0.0 – 8.10.0.21 ; … | Authenticated Remote Code Execution via Arbitrary File Write in AOS-8 and AOS-10 Web-Based Management Interface | HIGH 7.2 | 1.0 % | ||
| CVE-2026-44853 | 8.13.0.0 – 8.13.1.1 ; 8.12.0.0 – 8.12.0.6 ; 8.10.0.0 – 8.10.0.21 ; … | Authenticated Remote Code Execution via Arbitrary File Write in AOS-8 and AOS-10 Web-Based Management Interface | HIGH 7.2 | 1.0 % | ||
| CVE-2026-44852 | 8.13.0.0 – 8.13.1.1 ; 8.12.0.0 – 8.12.0.6 ; 8.10.0.0 – 8.10.0.21 ; … | Authenticated Remote Code Execution via Arbitrary File Overwrite in the AOS-8 and AOS-10 Web-Based Management Interface | HIGH 7.2 | 0.4 % | ||
| CVE-2026-23827 | 8.13.0.0 – 8.13.1.1 ; 8.12.0.0 – 8.12.0.6 ; 8.10.0.0 – 8.10.0.21 ; … | Unauthenticated Remote Code Execution via Heap Buffer Overflow in Network Management Service | HIGH 7.5 | 0.5 % | ||
| CVE-2026-23826 | 8.13.0.0 – 8.13.1.1 ; 8.12.0.0 – 8.12.0.6 ; 8.10.0.0 – 8.10.0.21 | Unauthenticated Denial of Service in AOS-8 Network Management Service | HIGH 7.5 | 0.4 % | ||
| CVE-2026-23825 | 10.8.0.0 ; 10.7.0.0 – 10.7.2.2 ; 10.4.0.0 – 10.4.1.10 | Unauthenticated Denial-of-Service via Crafted Messages in a Network Protocol Handling Component | HIGH 7.5 | 0.3 % | ||
| CVE-2026-23824 | 10.8.0.0 ; 10.7.0.0 – 10.7.2.2 ; 10.4.0.0 – 10.4.1.10 | Unauthenticated Denial-of-Service via Crafted Messages in a Network Protocol Handling Component | HIGH 7.5 | 0.3 % |