Skip to main content

Over 150 LLM Providers · Over 5,300 Models The most extensible AI-powered pentesting platform. Open source. Star on GitHub

Arubanetworks

183 known vulnerabilities

1
CRITICAL
40
HIGH
14
MEDIUM

Top Products

arubaos 50 sd-wan 26 7010 6 7030 6 7205 6 7210 6 7220 6 7240xm 6 7280 6 9004 6
55 CVEs · Page 1/2
7.2
CVE-2026-44871

Command injection vulnerabilities exist in the command line interface (CLI) service accessed by the PAPI protocol of AOS

4.9
CVE-2026-44874

A vulnerability exists in the web-based management interface of an AOS-10 Gateway that could allow an authenticated remo

5.4
CVE-2026-44873

A session management vulnerability in AOS-8 allows previously authenticated users to retain network access after their a

7.2
CVE-2026-44872

A command injection vulnerability exists in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Su

7.2
CVE-2026-44870

Command injection vulnerabilities exist in the command line interface (CLI) service accessed by the PAPI protocol of AOS

7.2
CVE-2026-44869

Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Suc

7.2
CVE-2026-44868

Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Suc

7.2
CVE-2026-44867

Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Suc

7.2
CVE-2026-44866

Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Suc

7.2
CVE-2026-44865

Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Suc

7.2
CVE-2026-44864

SQL injection vulnerabilities exist in several underlying service components accessible through the AOS-8 and AOS-10 com

7.2
CVE-2026-44863

SQL injection vulnerabilities exist in several underlying service components accessible through the AOS-8 and AOS-10 com

7.2
CVE-2026-44862

SQL injection vulnerabilities exist in several underlying service components accessible through the AOS-8 and AOS-10 com

7.2
CVE-2026-44861

SQL injection vulnerabilities exist in several underlying service components accessible through the AOS-8 and AOS-10 com

7.2
CVE-2026-44860

SQL injection vulnerabilities exist in several underlying service components accessible through the AOS-8 and AOS-10 com

7.2
CVE-2026-44859

Stack-based buffer overflow vulnerabilities exist in several underlying management service components accessed through t

7.2
CVE-2026-44858

Stack-based buffer overflow vulnerabilities exist in several underlying management service components accessed through t

7.2
CVE-2026-44857

Stack-based buffer overflow vulnerabilities exist in several underlying management service components accessed through t

7.2
CVE-2026-44856

Stack-based buffer overflow vulnerabilities exist in several underlying management service components accessed through t

7.2
CVE-2026-44855

Stack-based buffer overflow vulnerabilities exist in several underlying management service components accessed through t

7.2
CVE-2026-44854

Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Suc

7.2
CVE-2026-44853

Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Suc

7.2
CVE-2026-44852

An authenticated remote code execution vulnerability exists in the AOS-8 and AOS-10 web-based management interface. A vu

7.5
CVE-2026-23827

A heap-based buffer overflow vulnerability exists in a Network management service of AOS-8 and AOS-10 that could allow a

7.5
CVE-2026-23826

A vulnerability in a network management service of AOS-8 Operating System could allow an unauthenticated remote attacker

7.5
CVE-2026-23825

Vulnerabilities exist in a protocol-handling component of AOS-8 and AOS-10 Operating Systems. An unauthenticated attacke

7.5
CVE-2026-23824

Vulnerabilities exist in a protocol-handling component of AOS-8 and AOS-10 Operating Systems. An unauthenticated attacke

7.2
CVE-2026-23823

A vulnerability in the command line interface of Access Points running AOS-10 could allow an authenticated remote attack

5.3
CVE-2026-23822

A vulnerability in the XML handling component of AOS-8 DHCP services could allow an unauthenticated remote attacker to t

7.2
CVE-2026-23821

A vulnerability in the configuration processing logic of Access Points running AOS-10 could allow an authenticated remot

7.2
CVE-2026-23820

A vulnerability in the command line interface of Access Points running AOS-10 and AOS-8 Instant could allow an authentic

8.8
CVE-2026-23819

A vulnerability in the web-based management interface of Access Points running AOS-10 and AOS-8 Instant could allow an u

4.3
CVE-2026-23812

A vulnerability has been identified where an attacker connecting to an access point as a standard wired or wireless clie

4.3
CVE-2026-23811

A vulnerability in the client isolation mechanism may allow an attacker to bypass Layer 2 (L2) communication restriction

4.3
CVE-2026-23810

A vulnerability in the packet processing logic may allow an authenticated attacker to craft and transmit a malicious Wi-

5.4
CVE-2026-23809

A technique has been identified that adapts a known port-stealing method to Wi-Fi environments that use multiple BSSIDs.

5.4
CVE-2026-23808

A vulnerability has been identified in a standardized wireless roaming protocol that could enable a malicious actor to i

5.4
CVE-2026-23601

A vulnerability has been identified in the wireless encryption handling of Wi-Fi transmissions. A malicious actor can ge

5.5
CVE-2025-37185

Vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated re

9.8
CVE-2025-37184

A vulnerability exists in an Orchestrator service that could allow an unauthenticated remote attacker to bypass multi-fa

7.2
CVE-2025-37183

Vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated re

7.2
CVE-2025-37182

Vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated re

7.2
CVE-2025-37181

Vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated re

5.3
CVE-2025-37179

Multiple out-of-bounds read vulnerabilities were identified in a system component responsible for handling certain data

5.3
CVE-2025-37178

Multiple out-of-bounds read vulnerabilities were identified in a system component responsible for handling certain data

6.5
CVE-2025-37177

An arbitrary file deletion vulnerability has been identified in the command-line interface of mobility conductors runnin

6.5
CVE-2025-37176

A command injection vulnerability in AOS-8 allows an authenticated privileged user to alter a package header to inject s

7.2
CVE-2025-37175

Arbitrary file upload vulnerability exists in the web-based management interface of mobility conductors running either A

7.2
CVE-2025-37174

Authenticated arbitrary file write vulnerability exists in the web-based management interface of mobility conductors run

7.2
CVE-2025-37173

An improper input handling vulnerability exists in the web-based management interface of mobility conductors running eit

Frequently Asked Questions

How many CVEs affect Arubanetworks?

Arubanetworks has 183 CVE records in our database, including 1 critical and 65 high severity vulnerabilities.

What are the most severe Arubanetworks vulnerabilities?

Arubanetworks has 1 critical severity (CVSS 9.0+) and 65 high severity (CVSS 7.0-8.9) vulnerabilities. Review the list above sorted by publication date to find the most recent high-severity issues.

How can I scan for Arubanetworks vulnerabilities?

CyberStrike's AI-powered security agents automatically detect vulnerabilities in Arubanetworks products across your infrastructure. The platform provides continuous pentesting, DAST scanning, and real-time vulnerability monitoring with actionable remediation guidance.

Detect Arubanetworks Vulnerabilities

CyberStrike scans your infrastructure for Arubanetworks vulnerabilities and provides real-time remediation guidance.

Get Started