Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

ArubaOS (AOS) — Vulnerabilities & Security Advisories 34

All 34 CVE vulnerabilities found in ArubaOS (AOS), with AI-generated Chinese analysis, references, and POCs.

This page aggregates security vulnerabilities affecting ArubaOS (AOS), a network operating system developed by Aruba (now Hewlett Packard Enterprise). It compiles known security flaws specific to this platform, covering a defined historical timeframe of disclosed issues. Readers can track Aruba's published security advisories, analyze the prevalence of specific weakness classes such as buffer overflows or authentication bypasses, and review the product's complete vulnerability history to assess long-term security trends.

Vendor: Hewlett Packard Enterprise (HPE)

CVE ID Title CVSS Severity Published
CVE-2026-23823 Authenticated Command Injection leads to RCE in AOS-10 CLI Command 7.2 High 2026-05-12
CVE-2026-23822 Unauthenticated XML External Entity Injection in AOS-8 Instant allows Denial of Service 5.3 Medium 2026-05-12
CVE-2026-23821 Inconsistent input filtering allows Authenticated Command Injection in AOS-10 CLI 7.2 High 2026-05-12
CVE-2026-23820 Inconsistent input filtering allows Authenticated Command Injection in AOS-8 Instant and AOS-10 CLI 7.2 High 2026-05-12
CVE-2026-23819 Error in SSID Processing allows Stored XSS in Web Management Interface 8.8 High 2026-05-12
CVE-2025-37179 Out-of-Bounds Read Vulnerabilities Leading to Process Crash in AOS-8 Operating System 5.3 Medium 2026-01-13
CVE-2025-37178 Out-of-Bounds Read Vulnerabilities Leading to Process Crash in AOS-8 Operating System 5.3 Medium 2026-01-13
CVE-2025-37177 Authenticated Arbitrary File Deletion Vulnerability in AOS-10 or AOS-8 Command Line Interface (CLI) 6.5 Medium 2026-01-13
CVE-2025-37176 Authenticated Command Injection Vulnerability in an AOS-8 operating system's internal workflow 6.5 Medium 2026-01-13
CVE-2025-37175 Authenticated Arbitrary File Upload Vulnerability in AOS-10 or AOS-8 Web-Based Management Interface 7.2 High 2026-01-13
CVE-2025-37174 Authenticated Arbitrary File Write Vulnerability in AOS 10 and AOS-8 Web-Based Management Interface 7.2 High 2026-01-13
CVE-2025-37173 Improper Input Handling Vulnerability in Authenticated Configuration API Endpoint (AOS-10/AOS-8 Web UI) 7.2 High 2026-01-13
CVE-2025-37172 Authenticated Command Injection Vulnerabilities in AOS-8 Web-Based Management Interface 7.2 High 2026-01-13
CVE-2025-37171 Authenticated Command Injection Vulnerabilities in AOS-8 Web-Based Management Interface 7.2 High 2026-01-13
CVE-2025-37170 Authenticated Command Injection Vulnerabilities in AOS-8 Web-Based Management Interface 7.2 High 2026-01-13
CVE-2025-37169 Stack Overflow Vulnerability in AOS-10 Web-Based Management Interface 7.2 High 2026-01-13
CVE-2025-37168 Unauthenticated Arbitrary File Deletion Vulnerability in AOS-8 Operating System 8.2 High 2026-01-13
CVE-2025-37145 Authenticated Arbitrary File Download Vulnerabilities in a Low-Level Interface Library Affecting AOS-10 GW and AOS-8 Controller/Mobility Conductor Web-Based Management Interface 4.9 Medium 2025-10-14
CVE-2025-37144 Authenticated Arbitrary File Download Vulnerabilities in a Low-Level Interface Library Affecting AOS-10 GW and AOS-8 Controller/Mobility Conductor Web-Based Management Interface 4.9 Medium 2025-10-14
CVE-2025-37143 Authenticated Arbitrary File Download Vulnerability in CLI Binary of AOS-10 GW and AOS-8 Controller/Mobility Conductor Web Interface (Physical Access Required) 4.9 Medium 2025-10-14
CVE-2025-37142 Authenticated Arbitrary File Download Vulnerabilities in CLI Binary of AOS-8 Controller/Mobility Conductor Web-Based Management Interface 4.9 Medium 2025-10-14
CVE-2025-37141 Authenticated Arbitrary File Download Vulnerabilities in CLI Binary of AOS-8 Controller/Mobility Conductor Web-Based Management Interface 4.9 Medium 2025-10-14
CVE-2025-37140 Authenticated Arbitrary File Download Vulnerabilities in CLI Binary of AOS-8 Controller/Mobility Conductor Web-Based Management Interface 4.9 Medium 2025-10-14
CVE-2025-37139 Vulnerability in AOS firmware allows for Authenticated Local malicious actor to Permanently Disable Boot 6.0 Medium 2025-10-14
CVE-2025-37138 Authenticated Command Injection Vulnerability in CLI Binary of AOS-10 GW and AOS-8 Controller/Mobility Conductor Web-Based Management Interface (Physical Access Required) 6.2 Medium 2025-10-14
CVE-2025-37137 Authenticated Arbitrary File Deletion Vulnerabilities in AOS-8 Controller/Mobility Conductor Command Line Interface (CLI) 6.5 Medium 2025-10-14
CVE-2025-37136 Authenticated Arbitrary File Deletion Vulnerabilities in AOS-8 Controller/Mobility Conductor Command Line Interface (CLI) 6.5 Medium 2025-10-14
CVE-2025-37135 Authenticated Arbitrary File Deletion Vulnerabilities in AOS-8 Controller/Mobility Conductor Command Line Interface (CLI) 6.5 Medium 2025-10-14
CVE-2025-37134 Authenticated Command Injection Vulnerability in the Low-Level Interface Library Affecting AOS-10 GW and AOS-8 Controller/Mobility Conductor Web-Based Management Interface 7.2 High 2025-10-14
CVE-2025-37133 Authenticated Command Injection Vulnerability in AOS-8 Controller/Mobility Conductor Web-Based Management Interface via the CLI Binaryalong with accounting controls for tracking and logging user activities and resource usage. 7.2 High 2025-10-14

All 34 known CVE vulnerabilities affecting ArubaOS (AOS) with full Chinese analysis, references, and POCs where available.