Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-79895 | high | 7.5 | No | Vulnerabilities in the affected interface of AOS-10 could allow an unauthenticated remote attacker to conduct a denial of service attack. Su... | 2026-10-26 |
| CVE-2026-79894 | high | 7.5 | No | An unauthenticated Denial-of-Service (DoS) vulnerability exists in the PAPI protocol of AOS-8. Successful exploitation of this vulnerability... | 2026-10-26 |
| CVE-2026-79893 | high | 7.5 | No | Memory corruption vulnerabilities in AOS-10 could allow an unauthenticated remote attacker to conduct a denial of service attack. Successful... | 2026-10-26 |
| CVE-2026-79892 | high | 7.8 | No | A memory corruption vulnerability exists in AOS-8 that could allow an authenticated local attacker to execute arbitrary code. Successful exp... | 2026-10-26 |
| CVE-2026-79891 | high | 8.1 | No | A buffer overflow vulnerability exists in the command line interface of AOS-8 that could allow an unauthenticated remote attacker to run arb... | 2026-10-26 |
| CVE-2026-79890 | high | 8.1 | No | There are command injection vulnerabilities in AOS-8 that could lead to unauthenticated remote code execution by sending specially crafted P... | 2026-10-26 |
| CVE-2026-79889 | high | 8.1 | No | Vulnerabilities in multiple web interface endpoints of AOS-8 devices could allow an unauthenticated remote attacker to trigger a buffer over... | 2026-10-26 |
| CVE-2026-79888 | high | 8.1 | No | A vulnerability in a certain web interface endpoint of AOS-8 devices could allow an unauthenticated remote attacker to trigger a buffer over... | 2026-10-26 |
| CVE-2026-79887 | high | 8.1 | No | A vulnerability in the web interface of AOS-8 could allow an unauthenticated remote attacker to achieve remote code execution. Successful ex... | 2026-10-26 |
| CVE-2026-79857 | critical | 9.8 | No | There is a command injection vulnerability in the PAPI protocol (Aruba's access point management protocol) of AOS-8 that could lead to unaut... | 2026-10-26 |
| CVE-2026-79856 | critical | 9.8 | No | A buffer overflow vulnerability exists in the PAPI protocol of AOS-8 that could allow an unauthenticated remote attacker to circumvent exist... | 2026-10-26 |
| CVE-2026-79855 | critical | 9.8 | No | An authentication bypass vulnerability in the SSH daemon of AOS-8 allows an unauthenticated remote attacker to circumvent existing authentic... | 2026-10-26 |
| CVE-2026-79854 | critical | 9.8 | No | A vulnerability in the affected interface of AOS-10 could allow an unauthenticated remote attacker to conduct SQL injection attacks against... | 2026-10-26 |
| CVE-2026-79852 | critical | 9.8 | No | A vulnerability in the web-based management interface of AOS could allow an unauthenticated remote attacker to conduct SQL injection attacks... | 2026-10-26 |
| CVE-2026-79851 | critical | 10.0 | No | Buffer overflow vulnerabilities exist in the affected interface of AOS-10 that could lead to unauthenticated remote code execution. Successf... | 2026-10-26 |
| CVE-2026-79850 | critical | 10.0 | No | Vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated remote attacker to bypass existing authentication controls... | 2026-10-26 |
| CVE-2026-79849 | critical | 10.0 | No | Vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated remote attacker to conduct SQL injection attacks against a... | 2026-10-26 |
| CVE-2026-79848 | critical | 10.0 | No | Vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated remote attacker to conduct SQL injection attacks against a... | 2026-10-26 |
| CVE-2026-79847 | critical | 10.0 | No | Buffer overflow vulnerabilities in the affected interface of AOS-10 could lead to unauthenticated remote code execution by sending specially... | 2026-10-26 |
| CVE-2026-79844 | critical | 10.0 | No | Authentication bypass vulnerabilities in the affected interface of AOS-10 could allow an unauthenticated remote attacker to run arbitrary co... | 2026-10-26 |