HPE Aruba Networking Wireless Operating System (Aos)
27 CVEs tracked. None of them is in CISA KEV.
This hub aggregates every CVE we track for HPE Aruba Networking Wireless Operating System (Aos), a product in the hardware firmware space. Use it to gauge the current risk picture and drill into individual advisories.
HPE Aruba Networking Wireless Operating System (Aos) CVEs per month
| Month | CVEs |
|---|---|
| 2024-10 | 0 |
| 2024-11 | 0 |
| 2024-12 | 0 |
| 2025-01 | 0 |
| 2025-02 | 0 |
| 2025-03 | 0 |
| 2025-04 | 0 |
| 2025-05 | 0 |
| 2025-06 | 0 |
| 2025-07 | 0 |
| 2025-08 | 0 |
| 2025-09 | 0 |
| 2025-10 | 0 |
| 2025-11 | 0 |
| 2025-12 | 0 |
| 2026-01 | 0 |
| 2026-02 | 0 |
| 2026-03 | 0 |
| 2026-04 | 0 |
| 2026-05 | 27 |
| 2026-06 | 0 |
| 2026-07 | 0 |
| 2026-08 | 0 |
| 2026-09 | 0 |
Severity
How the 27 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.
- High25
- Medium2
Latest CVEs
The 15 most recently published vulnerabilities affecting HPE Aruba Networking Wireless Operating System (Aos).
- CVE-2026-44871Authenticated Command Injection Vulnerabilities in Command Line Interface (CLI) Service Accessed by PAPI Protocol of AOS-8 and AOS-10 Operating Systems7.2
- CVE-2026-44873Insufficient Session Invalidation on User Account Deactivation in AOS-8 Operating System5.4
- CVE-2026-44874Authenticated Arbitrary File Download via AOS-10 Web-Based Management Interface4.9
- CVE-2026-44872Authenticated Arbitrary File Upload via Command Injection in AOS-8 AND AOS-10 Web-Based Management Interface7.2
- CVE-2026-44870Authenticated Command Injection Vulnerabilities in Command Line Interface (CLI) Service Accessed by PAPI Protocol of AOS-8 and AOS-10 Operating Systems7.2
- CVE-2026-44869Authenticated Command Injection Vulnerabilities in the Web-Based Management Interface of AOS-8 and AOS-107.2
- CVE-2026-44868Authenticated Command Injection Vulnerabilities in the Web-Based Management Interface of AOS-8 and AOS-107.2
- CVE-2026-44867Authenticated Command Injection Vulnerabilities in the Web-Based Management Interface of AOS-8 and AOS-107.2
- CVE-2026-44866Authenticated Command Injection Vulnerabilities in the Web-Based Management Interface of AOS-8 and AOS-107.2
- CVE-2026-44865Authenticated Command Injection Vulnerabilities in the Web-Based Management Interface of AOS-8 and AOS-107.2
- CVE-2026-44864Authenticated Remote Code Execution via SQL Injection in AOS-8 and AOS-10 Operating Systems7.2
- CVE-2026-44863Authenticated Remote Code Execution via SQL Injection in AOS-8 and AOS-10 Operating Systems7.2
- CVE-2026-44862Authenticated Remote Code Execution via SQL Injection in AOS-8 and AOS-10 Operating Systems7.2
- CVE-2026-44861Authenticated Remote Code Execution via SQL Injection in AOS-8 and AOS-10 Operating Systems7.2
- CVE-2026-44860Authenticated Remote Code Execution via SQL Injection in AOS-8 and AOS-10 Operating Systems7.2
Product grouping is registry-driven, with AI assist and human review. How it works