Aruba

Security incidents tagged Aruba. Newest first.

1 Aruba incident in the last 12 months

Critical 4 · High 3 · Med 2 · Low 1 · Update ½Severity-weighted: critical 4 · high 3 · medium 2 · low 1 · update ½LessMore

Patched
HPE ArubaOS (AOS-8 / AOS-10): eight CVSS 10.0 unauthenticated RCE and auth-bypass flaws
HPE Networking patched 72 vulnerabilities in its wireless operating systems AOS-8 and AOS-10 (ArubaOS) on Oct 22 2026 (advisory HPESBNW05162). Eight are rated CVSS 10.0: authentication bypasses, command injection, SQL injection and buffer overflows that let an unauthenticated remote attacker run code on Mobility Conductors, Controllers, Gateways and Access Points, several through the web management interface and the PAPI protocol. HPE urges customers to patch quickly and to restrict management interfaces. It knows of no public exploit code or exploitation.
HPE Networking (Aruba) wireless OS AOS-8 and AOS-10: Mobility Conductors, Controllers, Gateways, Access PointsSince Oct 22, 2026updated Oct 23, 2026, 14:37 UTC

HPE ArubaOS (AOS-8 / AOS-10): eight CVSS 10.0 unauthenticated RCE and auth-bypass flaws
Cybersecurity News Everyday
@TweetThreatNews
HPE patched 72 ArubaOS vulnerabilities, including eight maximum-severity flaws affecting AOS-8 and AOS-10 that could allow unauthenticated remote code execution. HPE reported no known public exploit code or in-the-wild exploitation. t.co/KNdKKLKOzK
Oct 23, 2026view on x
HPE ArubaOS (AOS-8 / AOS-10): eight CVSS 10.0 unauthenticated RCE and auth-bypass flaws
Daily CyberSecurity
@Daily_CyberSec
HPE fixes 72 HPE Networking AOS vulnerabilities, including PAPI protocol flaws and CVSS 10 bugs CVE-2026-79844, CVE-2026-79845 and CVE-2026-79846. #HPE #Aruba #AOS10 #CVE202679844 #CVE202679845 #CVE202679846 #WiFiSecurity #CyberSecurity t.co/AmFXQm5g8G
Oct 23, 2026view on x