arubaos vulnerabilities and fixes

Recent CVEs affecting arubaos, with upgrade or downgrade steps. 32 tracked.

arubaos has 32 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 32. Most recent: 2026-05-12. Highest priority: CVE-2026-23827 (score 42/100).

• CVE-2026-23827 HIGH 7.5 UPGRADE UPGRADE A heap-based buffer overflow vulnerability exists in a Network management service of AOS-8 and AOS-10 that cou
• CVE-2026-23823 HIGH 7.2 UPGRADE A vulnerability in the command line interface of Access Points running AOS-10 could allow an authenticated rem
• CVE-2026-44853 HIGH 7.2 UPGRADE UPGRADE Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Sy
• CVE-2026-44854 HIGH 7.2 UPGRADE UPGRADE Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Sy
• CVE-2026-23826 HIGH 7.5 UPGRADE UPGRADE A vulnerability in a network management service of AOS-8 Operating System could allow an unauthenticated remot
• CVE-2026-23821 HIGH 7.2 UPGRADE A vulnerability in the configuration processing logic of Access Points running AOS-10 could allow an authentic
• CVE-2026-23824 HIGH 7.5 UPGRADE UPGRADE Vulnerabilities exist in a protocol-handling component of AOS-8 and AOS-10 Operating Systems
• CVE-2026-23825 HIGH 7.5 UPGRADE UPGRADE Vulnerabilities exist in a protocol-handling component of AOS-8 and AOS-10 Operating Systems
• CVE-2026-23820 HIGH 7.2 UPGRADE A vulnerability in the command line interface of Access Points running AOS-10 and AOS-8 Instant could allow an
• CVE-2026-23819 HIGH 8.8 UPGRADE A vulnerability in the web-based management interface of Access Points running AOS-10 and AOS-8 Instant could
• CVE-2026-44852 HIGH 7.2 UPGRADE UPGRADE An authenticated remote code execution vulnerability exists in the AOS-8 and AOS-10 web-based management inter
• CVE-2026-44855 HIGH 7.2 UPGRADE UPGRADE Stack-based buffer overflow vulnerabilities exist in several underlying management service components accessed
• CVE-2026-23822 MEDIUM 5.3 UPGRADE A vulnerability in the XML handling component of AOS-8 DHCP services could allow an unauthenticated remote att
• CVE-2026-44865 HIGH 7.2 UPGRADE UPGRADE Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Sy
• CVE-2026-44866 HIGH 7.2 UPGRADE UPGRADE Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Sy
• CVE-2026-44867 HIGH 7.2 UPGRADE UPGRADE Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Sy
• CVE-2026-44868 HIGH 7.2 UPGRADE UPGRADE Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Sy
• CVE-2026-44869 HIGH 7.2 UPGRADE UPGRADE Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Sy
• CVE-2026-44870 HIGH 7.2 UPGRADE UPGRADE Command injection vulnerabilities exist in the command line interface (CLI) service accessed by the PAPI proto
• CVE-2026-44872 HIGH 7.2 UPGRADE UPGRADE A command injection vulnerability exists in the web-based management interface of AOS-8 and AOS-10 Operating S
• CVE-2026-44859 HIGH 7.2 UPGRADE UPGRADE Stack-based buffer overflow vulnerabilities exist in several underlying management service components accessed
• CVE-2026-44860 HIGH 7.2 UPGRADE UPGRADE SQL injection vulnerabilities exist in several underlying service components accessible through the AOS-8 and
• CVE-2026-44861 HIGH 7.2 UPGRADE UPGRADE SQL injection vulnerabilities exist in several underlying service components accessible through the AOS-8 and
• CVE-2026-44862 HIGH 7.2 UPGRADE UPGRADE SQL injection vulnerabilities exist in several underlying service components accessible through the AOS-8 and
• CVE-2026-44863 HIGH 7.2 UPGRADE UPGRADE SQL injection vulnerabilities exist in several underlying service components accessible through the AOS-8 and
• CVE-2026-44864 HIGH 7.2 UPGRADE UPGRADE SQL injection vulnerabilities exist in several underlying service components accessible through the AOS-8 and
• CVE-2026-44874 MEDIUM 4.9 UPGRADE A vulnerability exists in the web-based management interface of an AOS-10 Gateway that could allow an authenti
• CVE-2026-44873 MEDIUM 5.4 UPGRADE UPGRADE A session management vulnerability in AOS-8 allows previously authenticated users to retain network access aft
• CVE-2026-44871 HIGH 7.2 UPGRADE UPGRADE Command injection vulnerabilities exist in the command line interface (CLI) service accessed by the PAPI proto
• CVE-2026-44856 HIGH 7.2 UPGRADE UPGRADE Stack-based buffer overflow vulnerabilities exist in several underlying management service components accessed
• CVE-2026-44857 HIGH 7.2 UPGRADE UPGRADE Stack-based buffer overflow vulnerabilities exist in several underlying management service components accessed
• CVE-2026-44858 HIGH 7.2 UPGRADE UPGRADE Stack-based buffer overflow vulnerabilities exist in several underlying management service components accessed

FAQ

How do I fix arubaos vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is arubaos being exploited right now?

None of the tracked arubaos CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which arubaos CVE should I patch first?

CVE-2026-23827 currently ranks highest (42/100): A heap-based buffer overflow vulnerability exists in a Network management service of AOS-8 and AOS-10 that cou.

RSS feed for arubaos · ← Back to latest CVEs