arubanetworks vulnerabilities

Recent CVEs affecting arubanetworks products. 132 tracked.

arubanetworks has 132 tracked vulnerabilities, 13 critical. A fixed release or vendor patch exists for 132. Most recent: 2026-09-22. Highest priority: CVE-2026-76674 (score 55/100).

CVE-2026-23827 HIGH 7.5 UPGRADE UPGRADE A heap-based buffer overflow vulnerability exists in a Network management service of AOS-8 and AOS-10 that cou
CVE-2026-23823 HIGH 7.2 UPGRADE A vulnerability in the command line interface of Access Points running AOS-10 could allow an authenticated rem
CVE-2026-44853 HIGH 7.2 UPGRADE UPGRADE Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Sy
CVE-2026-44854 HIGH 7.2 UPGRADE UPGRADE Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Sy
CVE-2026-23826 HIGH 7.5 UPGRADE UPGRADE A vulnerability in a network management service of AOS-8 Operating System could allow an unauthenticated remot
CVE-2026-23821 HIGH 7.2 UPGRADE A vulnerability in the configuration processing logic of Access Points running AOS-10 could allow an authentic
CVE-2026-23824 HIGH 7.5 UPGRADE UPGRADE Vulnerabilities exist in a protocol-handling component of AOS-8 and AOS-10 Operating Systems
CVE-2026-23825 HIGH 7.5 UPGRADE UPGRADE Vulnerabilities exist in a protocol-handling component of AOS-8 and AOS-10 Operating Systems
CVE-2026-23820 HIGH 7.2 UPGRADE A vulnerability in the command line interface of Access Points running AOS-10 and AOS-8 Instant could allow an
CVE-2026-23819 HIGH 8.8 UPGRADE A vulnerability in the web-based management interface of Access Points running AOS-10 and AOS-8 Instant could
CVE-2026-44852 HIGH 7.2 UPGRADE UPGRADE An authenticated remote code execution vulnerability exists in the AOS-8 and AOS-10 web-based management inter
CVE-2026-44855 HIGH 7.2 UPGRADE UPGRADE Stack-based buffer overflow vulnerabilities exist in several underlying management service components accessed
CVE-2026-23822 MEDIUM 5.3 UPGRADE A vulnerability in the XML handling component of AOS-8 DHCP services could allow an unauthenticated remote att
CVE-2026-44865 HIGH 7.2 UPGRADE UPGRADE Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Sy
CVE-2026-44866 HIGH 7.2 UPGRADE UPGRADE Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Sy
CVE-2026-44867 HIGH 7.2 UPGRADE UPGRADE Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Sy
CVE-2026-44868 HIGH 7.2 UPGRADE UPGRADE Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Sy
CVE-2026-44869 HIGH 7.2 UPGRADE UPGRADE Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Sy
CVE-2026-44870 HIGH 7.2 UPGRADE UPGRADE Command injection vulnerabilities exist in the command line interface (CLI) service accessed by the PAPI proto
CVE-2026-44872 HIGH 7.2 UPGRADE UPGRADE A command injection vulnerability exists in the web-based management interface of AOS-8 and AOS-10 Operating S
CVE-2026-44859 HIGH 7.2 UPGRADE UPGRADE Stack-based buffer overflow vulnerabilities exist in several underlying management service components accessed
CVE-2026-44860 HIGH 7.2 UPGRADE UPGRADE SQL injection vulnerabilities exist in several underlying service components accessible through the AOS-8 and
CVE-2026-44861 HIGH 7.2 UPGRADE UPGRADE SQL injection vulnerabilities exist in several underlying service components accessible through the AOS-8 and
CVE-2026-44862 HIGH 7.2 UPGRADE UPGRADE SQL injection vulnerabilities exist in several underlying service components accessible through the AOS-8 and
CVE-2026-44863 HIGH 7.2 UPGRADE UPGRADE SQL injection vulnerabilities exist in several underlying service components accessible through the AOS-8 and
CVE-2026-44864 HIGH 7.2 UPGRADE UPGRADE SQL injection vulnerabilities exist in several underlying service components accessible through the AOS-8 and
CVE-2026-44874 MEDIUM 4.9 UPGRADE A vulnerability exists in the web-based management interface of an AOS-10 Gateway that could allow an authenti
CVE-2026-44873 MEDIUM 5.4 UPGRADE UPGRADE A session management vulnerability in AOS-8 allows previously authenticated users to retain network access aft
CVE-2026-44871 HIGH 7.2 UPGRADE UPGRADE Command injection vulnerabilities exist in the command line interface (CLI) service accessed by the PAPI proto
CVE-2026-44856 HIGH 7.2 UPGRADE UPGRADE Stack-based buffer overflow vulnerabilities exist in several underlying management service components accessed
CVE-2026-44857 HIGH 7.2 UPGRADE UPGRADE Stack-based buffer overflow vulnerabilities exist in several underlying management service components accessed
CVE-2026-44858 HIGH 7.2 UPGRADE UPGRADE Stack-based buffer overflow vulnerabilities exist in several underlying management service components accessed
CVE-2026-76717 MEDIUM 5.3 UPGRADE A vulnerability exists in the Analytics and Location Engine (ALE) API that may allow for the disclosure of sen
CVE-2026-76716 MEDIUM 5.3 UPGRADE Multiple vulnerabilities exist in the Analytics and Location Engine (ALE) that may allow for unauthorized acce
CVE-2026-76715 HIGH 7.1 UPGRADE A vulnerability in an administrative component of Analytics and Location Engine (ALE) is vulnerable to a man-i
CVE-2026-76714 HIGH 7.2 UPGRADE Vulnerabilities in the Analytics and Location Engine web interface allows remote authenticated users to run ar
CVE-2026-76713 HIGH 7.2 UPGRADE A vulnerability exists in the maintenance restore functionality of Analytics and Location Engine (ALE)
CVE-2026-76712 HIGH 7.3 UPGRADE A vulnerability exists in the Analytics and Location Engine (ALE) that may allow for unauthorized access, info
CVE-2026-76709 CRITICAL 9.8 UPGRADE A vulnerability exists in the internal administrative component of Analytics and Location Engine (ALE)
CVE-2026-76710 HIGH 7.5 UPGRADE A vulnerability exists in the Analytics and Location Engine (ALE) management interface that may allow for the
CVE-2026-76711 HIGH 7.5 UPGRADE A vulnerability exists in an Analytics and Location Engine (ALE) component where the impacted process improper
CVE-2026-76685 HIGH 8.1 UPGRADE UPGRADE A vulnerability exists in the proxy packet processing logic of the affected component where it improperly proc
CVE-2026-76689 HIGH 7.2 UPGRADE UPGRADE A vulnerability exists in the configuration processing logic of the affected component where malformed input i
CVE-2026-76682 HIGH 8.2 UPGRADE UPGRADE A vulnerability in the network security monitoring component of intrusion detection systems could allow an una
CVE-2026-76686 HIGH 7.5 UPGRADE UPGRADE A vulnerability exists in the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways
CVE-2026-76690 HIGH 7.2 UPGRADE UPGRADE A vulnerability exists in a component of the HPE Networking EdgeConnect SD-WAN Gateways that may allow for arb
CVE-2026-76691 HIGH 7.2 UPGRADE UPGRADE Buffer overflow vulnerabilities exist in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways
CVE-2026-76698 MEDIUM 6.5 UPGRADE UPGRADE A command injection vulnerability exists in the web-based management interface of HPE Networking EdgeConnect S
CVE-2026-76700 MEDIUM 5.9 UPGRADE UPGRADE Vulnerabilities in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated remote attacker t
CVE-2026-76699 MEDIUM 6.4 UPGRADE UPGRADE A buffer overflow vulnerability exists in a system service within the underlying operating system of HPE Netwo
CVE-2026-76683 HIGH 8.1 UPGRADE UPGRADE Buffer overflow vulnerabilities exist in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways that c
CVE-2026-76701 MEDIUM 5.9 UPGRADE UPGRADE A vulnerability in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticat
CVE-2026-76702 MEDIUM 5.8 UPGRADE UPGRADE A vulnerability in the operating system of HPE Networking EdgeConnect SD-WAN Gateways could allow an authentic
CVE-2026-76703 MEDIUM 5.5 UPGRADE UPGRADE A buffer overflow vulnerability exists in the web-based management interface of HPE Networking EdgeConnect SD-
CVE-2026-76675 CRITICAL 9.1 UPGRADE UPGRADE A command injection vulnerability exists in the command line interface of EdgeConnect SD-WAN Gateways
CVE-2026-76679 HIGH 8.6 UPGRADE UPGRADE Vulnerabilities in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacent attacker
CVE-2026-76678 HIGH 8.8 UPGRADE UPGRADE A vulnerability in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways could allow a low-privilege
CVE-2026-76677 HIGH 8.8 UPGRADE UPGRADE A privilege escalation vulnerability exists in the API of EdgeConnect SD-WAN Gateways
CVE-2026-76676 HIGH 8.8 UPGRADE UPGRADE Buffer overflow vulnerabilities exist in the underlying operating system of EdgeConnect SD-WAN Gateways that c
CVE-2026-76707 MEDIUM 4.3 UPGRADE UPGRADE A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacent attacker
CVE-2026-76705 MEDIUM 5.5 UPGRADE UPGRADE A buffer overflow vulnerability exists in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways
CVE-2026-76697 MEDIUM 6.5 UPGRADE UPGRADE A vulnerability in the web-based management interface of HPE Networking EdgeConnect SD-WAN Gateways could allo
CVE-2026-76696 MEDIUM 6.5 UPGRADE UPGRADE A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacent attacker
CVE-2026-76695 MEDIUM 6.5 UPGRADE UPGRADE Buffer overflow vulnerabilities exist in the underlying operating system of HPE Networking EdgeConnect SD-WAN
CVE-2026-76694 MEDIUM 6.6 UPGRADE UPGRADE A privilege escalation vulnerability exists in the command line interface of HPE Networking EdgeConnect SD-WAN
CVE-2026-76693 HIGH 7.0 UPGRADE UPGRADE A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated remote attacker t
CVE-2026-76692 HIGH 7.1 UPGRADE UPGRADE A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacent attacker
CVE-2026-76674 CRITICAL 9.8 UPGRADE UPGRADE Buffer overflow vulnerabilities exist in the underlying operating system of HPE Networking EdgeConnect SD-WAN
CVE-2026-76708 CRITICAL 9.8 UPGRADE A vulnerability exists in the Analytics and Location Engine (ALE) where the application and underlying operati
CVE-2026-76704 MEDIUM 5.5 UPGRADE UPGRADE A vulnerability in the web-based management interface of the EdgeConnect SD-WAN Orchestrator could allow an au
CVE-2026-76706 MEDIUM 5.3 UPGRADE UPGRADE A vulnerability in the API endpoint of HPE Networking EdgeConnect SD-WAN Orchestrator could allow an unauthent
CVE-2026-76680 HIGH 8.5 UPGRADE UPGRADE Vulnerabilities in the API of EdgeConnect SD-WAN Orchestrator could allow a remote attacker authenticated with
CVE-2026-76681 HIGH 8.5 UPGRADE UPGRADE A vulnerability in the API of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker wit
CVE-2026-76684 HIGH 8.1 UPGRADE UPGRADE Vulnerabilities have been identified in the API of HPE Networking EdgeConnect SD-WAN Orchestrator that could p
CVE-2026-76669 CRITICAL 9.9 UPGRADE UPGRADE Privilege escalation vulnerabilities exist in the API of HPE Networking EdgeConnect SD-WAN Orchestrator
CVE-2026-76670 CRITICAL 9.9 UPGRADE UPGRADE Privilege escalation vulnerabilities exist in the API of HPE Networking EdgeConnect SD-WAN Orchestrator
CVE-2026-76673 CRITICAL 9.8 UPGRADE UPGRADE Vulnerabilities have been identified in the API of EdgeConnect SD-WAN Orchestrator that could potentially allo
CVE-2026-76687 HIGH 7.5 UPGRADE UPGRADE A vulnerability in the API endpoint of HPE Networking EdgeConnect SD-WAN Orchestrator could allow a low-privil
CVE-2026-76688 HIGH 7.5 UPGRADE UPGRADE Vulnerabilities have been identified in the web-based management interface of EdgeConnect SD-WAN Orchestrator
CVE-2026-76672 CRITICAL 9.9 UPGRADE UPGRADE A vulnerability exists in the SD-WAN Orchestrator that may lead to the exposure of sensitive configuration inf
CVE-2026-19766 CRITICAL 9.6 UPGRADE An authentication bypass vulnerability exists in the underlying operating system of HPE Networking Fabric Comp
CVE-2026-73712 HIGH 8.1 UPGRADE A vulnerability in the API of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to
CVE-2026-73728 MEDIUM 6.5 UPGRADE Denial-of-service vulnerabilities exist in the API of HPE Networking Fabric Composer that could allow an authe
CVE-2026-73729 MEDIUM 6.5 UPGRADE A vulnerability in the underlying operating system of HPE Networking Fabric Composer could allow an authentica
CVE-2026-73730 MEDIUM 6.5 UPGRADE A privilege escalation vulnerability exists in the API of HPE Networking Fabric Composer
CVE-2026-73742 MEDIUM 4.3 UPGRADE A vulnerability in an API endpoint of HPE Networking Fabric Composer could allow an authenticated low privileg
CVE-2026-73731 MEDIUM 6.1 UPGRADE A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthe
CVE-2026-73743 LOW 3.7 UPGRADE A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthe
CVE-2026-73741 MEDIUM 4.3 UPGRADE A vulnerability in the API of HPE Networking Fabric Composer could allow an authenticated low privilege operat
CVE-2026-73739 MEDIUM 4.4 UPGRADE A vulnerability exists in the API of HPE Networking Fabric Composer that allows for an attacker with administr
CVE-2026-73740 MEDIUM 4.4 UPGRADE A local privilege escalation vulnerability in HPE Networking Fabric Composer could allow an authenticated priv
CVE-2026-73738 MEDIUM 4.7 UPGRADE A vulnerability in the underlying operating system of HPE Networking Fabric Composer could allow an authentica
CVE-2026-73737 MEDIUM 4.8 UPGRADE An unauthenticated path traversal vulnerability exists in the API endpoint of HPE Networking Fabric Composer
CVE-2026-73735 MEDIUM 5.4 UPGRADE Vulnerabilities in the API of HPE Networking Fabric Composer could allow an authenticated low privilege operat
CVE-2026-73736 MEDIUM 5.3 UPGRADE A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthe
CVE-2026-73734 MEDIUM 5.4 UPGRADE A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthe
CVE-2026-73733 MEDIUM 5.4 UPGRADE Authentication bypasses in the API of HPE Networking Fabric Composer could allow an authenticated low privileg
CVE-2026-73732 MEDIUM 5.6 UPGRADE A vulnerability in the underlying operating system of HPE Networking Fabric Composer could allow an authentica
CVE-2026-73717 HIGH 7.5 UPGRADE A command injection vulnerability exists in the web-based management interface of HPE Networking Fabric Compos
CVE-2026-73716 HIGH 7.5 UPGRADE A remote code execution vulnerability exists in the underlying operating system of HPE Networking Fabric Compo
CVE-2026-73700 CRITICAL 9.0 UPGRADE A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an authent
CVE-2026-73701 CRITICAL 9.0 UPGRADE An unauthenticated remote code execution vulnerability exists in the underlying operating system of HPE Networ
CVE-2026-73710 HIGH 8.2 UPGRADE Vulnerabilities in an API endpoint of HPE Networking Fabric Composer could allow an unauthenticated remote att
CVE-2026-73745 LOW 3.1 UPGRADE A vulnerability in the API endpoint of HPE Networking Fabric Composer could allow an unauthenticated remote at
CVE-2026-73727 MEDIUM 6.5 UPGRADE Vulnerabilities in the API of HPE Networking Fabric Composer could allow an authenticated low privilege operat
CVE-2026-73726 MEDIUM 6.8 UPGRADE A vulnerability has been identified in the underlying operating system of HPE Networking Fabric Composer that
CVE-2026-73725 HIGH 7.0 UPGRADE A local privilege-escalation vulnerability has been discovered in HPE Networking Fabric Composer
CVE-2026-73724 HIGH 7.1 UPGRADE Privilege escalation vulnerabilities exist in the API of HPE Networking Fabric Composer
CVE-2026-73723 HIGH 7.1 UPGRADE A privilege escalation vulnerability exists in the web-based management interface of HPE Networking Fabric Com
CVE-2026-73722 HIGH 7.2 UPGRADE Command injection vulnerabilities in the web-based management interface of HPE Networking Fabric Composer coul
CVE-2026-73721 HIGH 7.2 UPGRADE Vulnerabilities in the API of HPE Networking Fabric Composer could allow an authenticated remote attacker to c
CVE-2026-73720 HIGH 7.2 UPGRADE Insecure file operations in the API of HPE Networking Fabric Composer could allow an authenticated remote atta
CVE-2026-73719 HIGH 7.2 UPGRADE An arbitrary file write vulnerability exists in the API of HPE Networking Fabric Composer and could allow an a
CVE-2026-73718 HIGH 7.4 UPGRADE A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthe
CVE-2026-73708 HIGH 8.3 UPGRADE A business logic vulnerability exists in the API of HPE Networking Fabric Composer
CVE-2026-73707 HIGH 8.5 UPGRADE Privilege escalation vulnerabilities exist in the API of HPE Networking Fabric Composer
CVE-2026-73706 HIGH 8.6 UPGRADE A vulnerability in the API of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to
CVE-2026-73705 HIGH 8.8 UPGRADE An arbitrary file write vulnerability in the API of HPE Networking Fabric Composer could allow an authenticate
CVE-2026-73704 HIGH 8.8 UPGRADE A command sanitization bypass exists in the API of HPE Networking Fabric Composer
CVE-2026-73703 HIGH 8.8 UPGRADE A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthe
CVE-2026-73702 HIGH 8.8 UPGRADE A privilege escalation vulnerability exists in the API of HPE Networking Fabric Composer
CVE-2026-73711 HIGH 8.1 UPGRADE A privilege escalation vulnerability exists in the API endpoint of HPE Networking Fabric Composer
CVE-2026-73713 HIGH 7.8 UPGRADE Local privilege-escalation vulnerabilities have been discovered in HPE Networking Fabric Composer
CVE-2026-73714 HIGH 7.6 UPGRADE A sensitive information disclosure vulnerability exists in the API of HPE Networking Fabric Composer
CVE-2026-73715 HIGH 7.5 UPGRADE A vulnerability in the API of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to
CVE-2026-73709 HIGH 8.3 UPGRADE A vulnerability in the underlying operating system of HPE Networking Fabric Composer could allow an unauthenti
CVE-2026-73744 LOW 3.5 UPGRADE A denial-of-service vulnerability exists in the web-based management interface of HPE Networking Fabric Compos
CVE-2026-73746 LOW 3.1 UPGRADE A denial-of-service vulnerability exists in the API of HPE Networking Fabric Composer that could allow an auth
CVE-2026-73747 LOW 2.5 UPGRADE A local privilege-escalation vulnerability has been discovered in HPE Networking Fabric Composer
CVE-2026-76657 CRITICAL 10.0 UPGRADE Vulnerabilities have been identified in the API of HPE Networking Fabric Composer that could potentially allow
CVE-2026-73748 LOW 2.2 UPGRADE A vulnerability in the affected interface of HPE Networking Fabric Composer allows an attacker with administra
CVE-2026-76658 CRITICAL 10.0 UPGRADE A vulnerability has been identified in the SSH daemon of HPE Networking Fabric Composer that could allow an un

FAQ

How do I fix arubanetworks vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is arubanetworks being exploited right now?

None of the tracked arubanetworks CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which arubanetworks CVE should I patch first?

CVE-2026-76674 currently ranks highest (55/100): Buffer overflow vulnerabilities exist in the underlying operating system of HPE Networking EdgeConnect SD-WAN .

Products

RSS feed for arubanetworks · ← Back to latest CVEs