Tagged “cve.org”
CVEs tagged cve.org, newest first.
47407 CVEsRSS
CVE-2026-79881High· 8.5Authentication Bypass Leading to Remote Code Execution in AOS-8
An authentication bypass vulnerability in the underlying operating system of AOS-8 could allow an unauthenticated remote attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to execute …
CVE-2026-79880High· 8.7Authenticated Server-Side Request Forgery leads to Remote Code Execution in AOS-8
A vulnerability in the command line interface of AOS-8 could allow an authenticated remote attacker with high privileges to conduct a server-side request forgery (SSRF) attack. Successful exploitation could allow an attacker to execute a…
CVE-2026-79879High· 8.8Unauthenticated Adjacent Memory Corruption Vulnerabilities lead to Remote Code Execution in AOS-10
Memory corruption vulnerabilities in the affected interface of AOS-10 could lead to remote code execution by an unauthenticated adjacent attacker. Successful exploitation could allow an attacker to execute arbitrary code as a privileged …
CVE-2026-79878High· 8.8Unauthenticated Adjacent Command Injection Vulnerability in the AOS-8 Command Line Interface Accessed by the PAPI Protocol
A command injection vulnerability in the AOS-8 command line interface accessed by the PAPI protocol could lead to unauthenticated remote code execution by an adjacent attacker sending specially crafted PAPI packets destined to the PAPI U…
CVE-2026-79877High· 8.8Unauthenticated Adjacent Remote Code Execution Vulnerability in AOS-10
A remote code execution vulnerability in the underlying operating system of AOS-10 could allow an unauthenticated adjacent attacker to execute arbitrary code on an affected device. Successful exploitation could allow an attacker to execu…
CVE-2026-79876Critical· 9.3Unauthenticated Adjacent Sensitive Information Disclosure in AOS-10 Wi-Fi Frame Processing
A sensitive information disclosure vulnerability in the Wi-Fi frame processing of AOS-10 could allow an unauthenticated adjacent attacker to access sensitive information. Successful exploitation could allow an attacker to retrieve inform…
CVE-2026-79875Critical· 9.3Authentication Bypass in the PAPI Protocol of AOS-8 Allows Unauthorized Administrative Access
A vulnerability has been identified in the PAPI protocol of AOS-8 that could potentially allow an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain a…
CVE-2026-79874Critical· 9.3Authentication Bypass in the API allows Administrative Access of AOS-10
An authentication bypass in the API of AOS-10 allows an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative access, modify system config…
CVE-2026-79873Critical· 9.3Unauthenticated Adjacent Authentication Bypasses in the PAPI Protocol of AOS-10 Leads to Unauthorized Administrative Access
Authentication bypass vulnerabilities in the PAPI protocol of AOS-10 could allow an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative …
CVE-2026-79872Critical· 9.4Unauthenticated Buffer Overflow Vulnerability allows Remote Code Execution in AOS-10 and AOS-8
A buffer overflow vulnerability exists in the underlying operating system of AOS that could lead to unauthenticated remote code execution by an unauthenticated remote attacker. Successful exploitation of this vulnerability results in the…
CVE-2026-79871Critical· 9.6Unauthenticated Sensitive Information Disclosure in the Command Line Interface of AOS-10
A sensitive information disclosure vulnerability in the command line interface of AOS-10 could allow an unauthenticated remote attacker to access sensitive information. Successful exploitation could allow an attacker to retrieve informat…
CVE-2026-79870Critical· 9.6Authentication Bypass leads to Unauthorized Access in AOS-8
An authentication bypass vulnerability in the PAPI protocol of AOS-8 could allow an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative …
CVE-2026-79869Critical· 9.6Authentication Bypass Leading to Remote Code Execution in AOS-10
Authentication bypass vulnerabilities in the affected interface of AOS-10 could allow an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to execute arbitra…
CVE-2026-79868Critical· 9.6Authentication Bypass Vulnerabilities lead to Complete System Compromise in AOS-8
Authentication bypass vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrat…
CVE-2026-79867Critical· 9.6Authentication Bypass Leading to Remote Code Execution in AOS-8
Authentication bypass vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated adjacent attacker to circumvent existing authentication controls and run arbitrary commands on the underlying host. Successful exploi…
CVE-2026-79865Critical· 9.6Unauthenticated Adjacent Memory Corruption Vulnerability leads to Remote Code Execution in AOS-10
A memory corruption vulnerability in the affected interface of AOS-10 could allow an unauthenticated adjacent attacker to achieve remote code execution. Successful exploitation could allow an attacker to execute arbitrary code as a privi…
CVE-2026-79866Critical· 9.6Unauthenticated Adjacent Path Traversal Vulnerability leads to Filesystem Compromise in AOS-8
An unauthenticated path traversal vulnerability exists in the PAPI protocol in AOS-8. Successful exploitation of this vulnerability could allow an unauthenticated adjacent attacker to read, modify, and delete files on the underlying oper…
CVE-2026-79864Critical· 9.6Unauthenticated Adjacent Command Injection Vulnerability in AOS-10
Command injection vulnerabilities exist in the affected interface of AOS-10 that could allow an unauthenticated adjacent attacker to perform command injection. Successful exploitation could allow an attacker to execute arbitrary commands…
CVE-2026-79863Critical· 9.6Unauthenticated Adjacent Buffer Overflow Vulnerabilities lead to Remote Code Execution
Buffer overflow vulnerabilities in the affected interface of AOS-10 or AOS-8 could allow an unauthenticated adjacent attacker to execute arbitrary code by sending specially crafted data to the affected interface. Successful exploitation …
CVE-2026-79861Critical· 9.8Unauthenticated Command Injection Vulnerability in the PAPI Protocol of AOS-10
There is a command injection vulnerability in AOS-10 that could lead to unauthenticated remote code execution by sending specially crafted PAPI packets. Successful exploitation of this vulnerability results in the ability to execute arbi…
CVE-2026-79862Critical· 9.6Unauthenticated Adjacent Buffer Overflow Vulnerabilities lead to Remote Code Execution
Buffer overflow vulnerabilities in the affected interface of AOS-10 or AOS-8 could allow an unauthenticated adjacent attacker to execute arbitrary code by sending specially crafted data to the affected interface. Successful exploitation …
CVE-2026-79860Critical· 9.8Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-8
Buffer overflow vulnerabilities exist in an underlying service of AOS-8 that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management protocol) UDP por…
CVE-2026-79859Critical· 9.8Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-8
Buffer overflow vulnerabilities exist in the affected interface of AOS-8 that could lead to unauthenticated remote code execution. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the unde…
CVE-2026-79858Critical· 9.8Unauthenticated SQL Injection Vulnerability in the PAPI Protocol of AOS-8
An unauthenticated SQL injection vulnerability exists in the PAPI protocol in AOS-8. Successful exploitation could allow an unauthenticated remote attacker to obtain and modify sensitive information in the underlying database and to inte…
CVE-2026-79857Critical· 9.8Unauthenticated Command Injection Vulnerability in AOS-8 PAPI Protocol
There is a command injection vulnerability in the PAPI protocol (Aruba's access point management protocol) of AOS-8 that could lead to unauthenticated remote code execution by sending specially crafted packets to the affected UDP port. S…
CVE-2026-79856Critical· 9.8Unauthenticated Buffer Overflow Vulnerability leads to Authentication Bypass in AOS-8
A buffer overflow vulnerability exists in the PAPI protocol of AOS-8 that could allow an unauthenticated remote attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrati…
CVE-2026-79853Critical· 9.8Unauthenticated Sensitive Information Disclosure leads to Remote Code Execution in AOS-10
Sensitive information disclosure vulnerabilities in the affected interface of AOS-10 could allow an unauthenticated remote attacker to obtain sensitive information from the affected system. Successful exploitation could allow an attacker…
CVE-2026-111497Critical· 9.2CISA KEVPoCOut-of-Bounds Write in Google Brotli Decoder
A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive m…
CVE-2026-79855Critical· 9.8Authentication Bypass in the SSH Daemon of AOS-8 leads to Complete System Compromise
An authentication bypass vulnerability in the SSH daemon of AOS-8 allows an unauthenticated remote attacker to circumvent existing authentication controls. Successful exploitation allows an attacker to gain administrative privileges lead…
CVE-2026-79854Critical· 9.8Unauthenticated SQL Injection Vulnerability leads to Remote Code Execution in AOS-10
A vulnerability in the affected interface of AOS-10 could allow an unauthenticated remote attacker to conduct SQL injection attacks against the AOS-10 instance. Successful exploitation could allow an attacker to execute arbitrary command…