Tagged “cve.org”
CVEs tagged cve.org, newest first.
47407 CVEsRSS
CVE-2026-95717Medium· 5.5Authenticated Stored Cross-Site Scripting (XSS) Vulnerability in AOS Web-Based Management Interface
A stored cross-site scripting (XSS) vulnerability exists in the web-based management interface of AOS that could allow an authenticated remote attacker with high privileges to inject malicious scripts. Successful exploitation could allow…
CVE-2026-95715Medium· 6.8Unauthenticated Local Command Injection Vulnerability in AOS-10 Command Line Interface
An unauthenticated command injection vulnerability exists in the command line interface of AOS-10. Successful exploitation could allow an attacker with physical access to execute arbitrary commands as a privileged user on the underlying …
CVE-2026-95716Medium· 6.5Authentication Bypass in the PAPI Protocol of AOS-10 allows Unauthorized Configuration Changes
An authentication bypass in the PAPI protocol of AOS-10 allows an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation allows an attacker to change the state of certain settings of a v…
CVE-2026-95714Medium· 6.8Authenticated Adjacent Buffer Overflow Vulnerability leads to Remote Code Execution in AOS-10
A buffer overflow vulnerability exists in the API of AOS-10 that could allow an authenticated adjacent attacker with high privileges to achieve remote code execution. Successful exploitation could allow an attacker to execute arbitrary c…
CVE-2026-95712High· 7.1Unauthenticated Adjacent Sensitive Information Disclosure and Denial-of-Service in AOS-8 via the PAPI Protocol
A sensitive information disclosure vulnerability in the PAPI protocol of AOS-8 could allow an unauthenticated adjacent attacker to access limited information handled by the affected service. Successful exploitation could allow an attacke…
CVE-2026-95711High· 7.1Authentication Bypass Leading to Remote Code Execution in AOS-10 Web-Based Management Interface
An authentication bypass vulnerability in the web-based management interface of AOS-10 could allow an unauthenticated adjacent attacker to circumvent existing authentication controls and run arbitrary commands on the underlying host if c…
CVE-2026-95713High· 7.0Unauthenticated Buffer Overflow Vulnerability leads to Denial-of-Service in AOS-8 Command Line Interface
An unauthenticated buffer overflow vulnerability exists in the command line interface of AOS-8. Successful exploitation could allow an unauthenticated remote attacker to disrupt the availability of the affected interface, along with limi…
CVE-2026-95710High· 7.1Unauthenticated Adjacent Buffer Overflow Vulnerability leads to Denial-of-Service in AOS-10 or AOS-8
An unauthenticated buffer overflow vulnerability exists in the underlying operating system of AOS-10 or AOS-8 and could allow an unauthenticated adjacent attacker to conduct a denial of service attack. Successful exploitation could allow…
CVE-2026-95709High· 7.2Authenticated Command Injection Vulnerabilities in AOS-10
Command injection vulnerabilities exist in the affected interface of AOS-10 that could allow an authenticated remote attacker with high privileges to perform command injection. Successful exploitation could allow an attacker to execute a…
CVE-2026-95706High· 7.2Authenticated Command Injection Vulnerabilities in AOS-8
Command injection vulnerabilities in the affected interface of AOS-8 could allow an authenticated remote attacker with high privileges to perform command injection. Successful exploitation could allow an attacker to execute commands with…
CVE-2026-95708High· 7.2Authenticated File Write leads to Command Injection Vulnerabilities in AOS-10
Command injection vulnerabilities exist in the affected interface of AOS-10 that could allow an authenticated remote attacker with high privileges to perform command injection. Successful exploitation could allow an attacker to execute a…
CVE-2026-95707High· 7.2Authenticated Buffer Overflow Vulnerability leads to Remote Code Execution in AOS-8
A buffer overflow vulnerability in the PAPI protocol of AOS-8 could allow an authenticated remote attacker with high privileges to achieve remote code execution. Successful exploitation could allow an attacker to execute arbitrary code a…
CVE-2026-95705High· 7.2Authenticated Command Injection Vulnerabilities in AOS-8
Command injection vulnerabilities in the affected interface of AOS-8 could allow an authenticated remote attacker with high privileges to perform command injection. Successful exploitation could allow an attacker to execute commands with…
CVE-2026-95704High· 7.2Authenticated Remote Code Execution allows Unauthorized System Control in Wireless Network Management Interface
A vulnerability in the web-based management interface of wireless network management systems could allow an authenticated remote attacker to execute remote code. Successful exploitation could enable an attacker to execute arbitrary comma…
CVE-2026-79956High· 7.2Improper Sanitization leads to Command Injection in AOS-8 Web Interface
A vulnerability in the CLI command handling of the AOS-8 web interface could allow an authenticated remote attacker to execute arbitrary commands on the underlying operating system. Successful exploitation could allow an attacker to run …
CVE-2026-79955High· 7.5Unauthenticated Memory Corruption Vulnerability leads to Denial-of-Service in AOS-8
An unauthenticated memory corruption vulnerability exists in a service accessed via the PAPI protocol in AOS-8 that could allow an unauthenticated remote attacker to conduct a denial of service attack. Successful exploitation could allow…
CVE-2026-79895High· 7.5Unauthenticated Remote Denial-of-Service (DoS) Vulnerabilities in AOS-10
Vulnerabilities in the affected interface of AOS-10 could allow an unauthenticated remote attacker to conduct a denial of service attack. Successful exploitation could allow an attacker to disrupt the availability of the affected interface.
CVE-2026-79887High· 8.1Authentication Bypass in Web Interface of AOS-8 allows Remote Command Execution (RCE)
A vulnerability in the web interface of AOS-8 could allow an unauthenticated remote attacker to achieve remote code execution. Successful exploitation could lead to complete device control, enabling interception of network traffic and po…
CVE-2026-79894High· 7.5Unauthenticated Denial-of-Service (DoS) Vulnerability in the PAPI Protocol of AOS-8
An unauthenticated Denial-of-Service (DoS) vulnerability exists in the PAPI protocol of AOS-8. Successful exploitation of this vulnerability results in the ability to disrupt the availability of the affected interface.
CVE-2026-79893High· 7.5Unauthenticated Memory Corruption Vulnerabilities lead to Denial-of-Service in AOS-10
Memory corruption vulnerabilities in AOS-10 could allow an unauthenticated remote attacker to conduct a denial of service attack. Successful exploitation could allow an attacker to disrupt the availability of the affected service.
CVE-2026-79892High· 7.8Authenticated Local Memory Corruption Vulnerability leads to Arbitrary Code Execution in AOS-8
A memory corruption vulnerability exists in AOS-8 that could allow an authenticated local attacker to execute arbitrary code. Successful exploitation could allow the attacker to execute arbitrary code as a privileged user on the underlyi…
CVE-2026-79891High· 8.1Unauthenticated Buffer Overflow Vulnerability leads to Remote Code Execution in AOS-8
A buffer overflow vulnerability exists in the command line interface of AOS-8 that could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host if certain preconditions outside of the attacker's control…
CVE-2026-79890High· 8.1Unauthenticated Command Injection Vulnerabilities in AOS-8 Accessed by the PAPI Protocol
There are command injection vulnerabilities in AOS-8 that could lead to unauthenticated remote code execution by sending specially crafted PAPI packets. Successful exploitation of this vulnerability results in the ability to execute arbi…
CVE-2026-79889High· 8.1Multiple Unauthenticated Buffer Overflow vulnerabilities in AOS-8 Web Interface result in Remote Code Execution
Vulnerabilities in multiple web interface endpoints of AOS-8 devices could allow an unauthenticated remote attacker to trigger a buffer overflow by using specially crafted requests. Successful exploitation could allow an attacker to exec…
CVE-2026-79888High· 8.1Unauthenticated Buffer Overflow allows Remote Code Execution in web interface
A vulnerability in a certain web interface endpoint of AOS-8 devices could allow an unauthenticated remote attacker to trigger a buffer overflow. Successful exploitation could allow an attacker to execute arbitrary commands on the underl…
CVE-2026-79886High· 8.2Unauthenticated Buffer Overflow Vulnerability leads to Denial-of-Service in AOS-8
An unauthenticated buffer overflow vulnerability exists in the PAPI protocol of AOS-8. Successful exploitation could allow an unauthenticated remote attacker to disrupt the availability of the affected service on the controller, with a l…
CVE-2026-79885High· 8.2Unauthenticated File Write Vulnerability leads to Denial-of-Service in AOS-8
An unauthenticated file write vulnerability exists in the PAPI protocol in AOS-8. Successful exploitation could allow an unauthenticated remote attacker to make limited modifications to files on the affected system and to disrupt the ava…
CVE-2026-79884High· 8.2Authentication Bypass leads to Sensitive Information Disclosure in AOS-8
A vulnerability in the web-based management interface of AOS-8 could allow an unauthenticated adjacent attacker to bypass existing authentication controls and access sensitive information. Successful exploitation could allow an attacker …
CVE-2026-79883High· 8.3Unauthenticated Adjacent Buffer Overflow Vulnerability in the PAPI Protocol leads to Sensitive Information Disclosure in AOS-10
A buffer overflow vulnerability in the PAPI protocol of HPE Networking AOS-10 could allow an unauthenticated adjacent attacker to access sensitive information. Successful exploitation could allow an attacker to retrieve information which…
CVE-2026-79882High· 8.3Unauthenticated Adjacent Command Injection Vulnerability in the PAPI Protocol of AOS-10
There is a command injection vulnerability in the PAPI protocol of AOS-10 that could lead to unauthenticated remote code execution by an adjacent attacker sending specially crafted packets. Successful exploitation of this vulnerability c…