How many arubanetworks arubaos CVEs are in CISA KEV?

None of arubanetworks arubaos's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of arubanetworks arubaos are affected?

305 distinct arubanetworks arubaos versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in arubanetworks arubaos CVEs?

arubanetworks arubaos's CVEs most often map to these CWE weakness types: CWE-77 (Improper Neutralization of Special Elements used in a Command ('Command Injection')), CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')), CWE-121 (Stack-based Buffer Overflow), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')).

How many critical arubanetworks arubaos vulnerabilities are there?

arubanetworks arubaos has 55 critical and 132 high-severity CVEs.

What is the average severity of arubanetworks arubaos CVEs?

The average CVSS base score across arubanetworks arubaos's scored CVEs is 7.6.

arubanetworks

242 CVEs

arubanetworks arubaos Vulnerabilities

Name: arubanetworks arubaos vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for arubaos by arubanetworks.

242

Total CVEs

Published

In CISA KEV

Exploited in the wild

Public exploits

PoC or exploit code

7.6

Avg CVSS

2008–2026

Last updated May 12, 2026

Overview

arubanetworks arubaos has 242 published CVE records since 2008, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 3 have a known public exploit. The average CVSS base score across scored CVEs is 7.6.

This page aggregates every publicly disclosed vulnerability (CVE) affecting arubanetworks arubaos, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of arubanetworks arubaos's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical55

High132

Medium54

Low1

In CISA’s Known Exploited Vulnerabilities catalog

None of arubanetworks arubaos's CVEs are currently listed in CISA's KEV catalog.

Public exploits

3 of arubanetworks arubaos's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every arubanetworks arubaos version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

10.3.0.0 <= v < 10.4.0.042 CVEs
10.3.0.0 <= v <= 10.3.1.037 CVEs
8.10.0.0 <= v <= 8.10.0.432 CVEs
8.6.0.0 <= v <= 8.6.0.1932 CVEs
6.5.4.0 <= v < 8.10.0.2226 CVEs
8.11.0.0 <= v < 8.12.0.726 CVEs
8.13.0.0 <= v < 8.13.1.226 CVEs
10.4.0.0 <= v < 10.4.1.1125 CVEs
10.5.0.0 <= v < 10.7.2.325 CVEs
10.4.0.0 <= v <= 10.4.1.023 CVEs
10.5.0.0 <= v <= 10.5.1.023 CVEs
10.3.0.0 <= v < 10.4.1.118 CVEs
10.5.0.0 <= v < 10.5.1.118 CVEs
10.4.0.0 <= v < 10.4.1.016 CVEs
10.5.0.0 <= v < 10.5.1.016 CVEs
6.5.4.0 <= v < 6.5.5.016 CVEs
8.10.0.0 <= v < 8.10.0.1016 CVEs
8.11.0.0 <= v < 8.11.2.116 CVEs
10.4.0.0 <= v < 10.4.0.215 CVEs
8.6.0.0 <= v < 8.7.0.015 CVEs
8.7.0.0 <= v < 8.8.0.015 CVEs
8.8.0.0 <= v < 8.9.0.015 CVEs
8.9.0.0 <= v < 8.10.0.015 CVEs
10.3.0.0 <= v < 10.4.0.314 CVEs
10.5.0.0 <= v <= 10.5.0.014 CVEs
10.4.0.0 <= v < 10.4.1.913 CVEs
10.7.0.0 <= v < 10.7.2.113 CVEs
8.10.0.0 <= v < 8.10.0.1913 CVEs
8.12.0.0 <= v < 8.12.0.613 CVEs
8.13.0.0 <= v < 8.13.1.013 CVEs
10.3.0.0 <= v < 10.3.1.112 CVEs
8.11.0.0 <= v < 8.11.1.112 CVEs
8.11.0.0 <= v < 8.13.1.111 CVEs
6.5.4.0 <= v < 6.5.4.2210 CVEs
8.3.0.0 <= v < 8.3.0.1610 CVEs
8.4.0.0 <= v < 8.6.0.1710 CVEs
8.7.0.0 <= v < 8.7.1.910 CVEs
6.5.4.0 <= v < 8.6.0.219 CVEs
8.7.0.0 <= v < 8.10.0.79 CVEs
10.3.0.0 <= v <= 10.3.0.08 CVEs
8.5.0.0 <= v < 8.5.0.128 CVEs
8.8.0.0 <= v < 10.3.0.18 CVEs
10.8.0.0 <= v <= 10.8.0.07 CVEs
8.7.0.0 <= v < 8.7.1.47 CVEs
8.8.0.0 <= v <= 8.9.0.37 CVEs
10.3.0.0 <= v < 10.4.1.106 CVEs
10.3.0.0 <= v <= 10.4.1.106 CVEs
10.5.0.0 <= v < 10.7.2.26 CVEs
10.5.0.0 <= v <= 10.7.2.26 CVEs
6.5.4.0 <= v < 6.5.4.236 CVEs
6.5.4.0 <= v <= 8.10.0.216 CVEs
8.11.0.0 <= v <= 8.12.0.66 CVEs
8.13.0.0 <= v <= 8.13.1.16 CVEs
8.4.0.0 <= v < 8.6.0.186 CVEs
8.6.0.0 <= v < 8.10.0.216 CVEs
8.7.0.0 <= v < 8.7.1.106 CVEs
10.4.0.0 <= v <= 10.4.0.35 CVEs
10.4.0.0 <= v <= 10.4.1.45 CVEs
10.5.0.0 <= v < 10.7.0.05 CVEs
10.5.0.0 <= v <= 10.5.0.15 CVEs
6.4.4.0 <= v < 6.4.4.255 CVEs
6.5.4.0 <= v < 8.10.0.215 CVEs
8.10.0.0 <= v <= 8.10.0.105 CVEs
8.10.0.0 <= v <= 8.10.0.95 CVEs
8.11.0.0 <= v <= 8.11.2.05 CVEs
8.11.0.0 <= v <= 8.11.2.15 CVEs
8.5.0.0 <= v < 8.5.0.135 CVEs
8.6.0.0 <= v < 8.6.0.85 CVEs
8.6.0.0 <= v < 8.6.0.95 CVEs
8.7.0.0 <= v < 8.7.1.25 CVEs
10.4.0.0 <= v < 10.4.1.74 CVEs
10.5.0.0 <= v < 10.6.0.04 CVEs
10.7.0.0 <= v < 10.7.1.14 CVEs
6.5.4.0 <= v < 6.5.4.204 CVEs
8.10.0.0 <= v < 8.10.0.164 CVEs
8.12.0.0 <= v < 8.12.0.44 CVEs
8.6.0.0 <= v < 8.6.0.64 CVEs
10.0.0.0 <= v <= 10.4.1.133 CVEs
10.3.0.0 <= v < 10.4.1.43 CVEs
10.4.0.0 <= v < 10.4.1.23 CVEs
10.5.0.0 <= v < 10.6.0.13 CVEs
10.5.0.0 <= v <= 10.6.0.23 CVEs
10.6.0.0 <= v < 10.6.0.13 CVEs
10.6.0.0 <= v <= 10.6.0.03 CVEs
10.6.0.0 <= v <= 10.6.0.23 CVEs
6.4.0.0 <= v <= 8.10.0.133 CVEs
8.10.0.0 <= v < 8.10.0.73 CVEs
8.11.0.0 <= v <= 8.12.0.13 CVEs
8.3.0.0 <= v < 8.3.0.153 CVEs
8.6.0.0 <= v < 8.6.0.223 CVEs
8.7.0.0 <= v < 8.7.1.03 CVEs
< 10.7.2.02 CVEs
<= 10.4.0.22 CVEs
<= 10.5.0.02 CVEs
10.3.0.0 <= v <= 10.4.0.02 CVEs
10.5.0.0 <= v <= 10.6.0.02 CVEs
3.3.1.16 <= v <= 3.3.1.162 CVEs
3.3.2.6 <= v <= 3.3.2.62 CVEs
6.1.3.0 <= v <= 6.1.3.02 CVEs
6.1.3.1 <= v <= 6.1.3.12 CVEs
6.1.3.2 <= v <= 6.1.3.22 CVEs
6.1.3.4 <= v <= 6.1.3.42 CVEs
6.1.3.5 <= v <= 6.1.3.52 CVEs
6.1.3.6 <= v <= 6.1.3.62 CVEs
6.5.4.0 <= v <= 8.9.0.02 CVEs
8.10.0.0 <= v <= 8.10.0.132 CVEs
8.11.0.0 <= v <= 8.12.0.02 CVEs
8.12.0.0 <= v <= 8.12.0.12 CVEs
8.3.0.0 <= v < 8.3.0.142 CVEs
8.4.0.0 <= v < 8.5.0.112 CVEs
8.6.0.0 <= v < 8.6.0.72 CVEs
8.8.0.0 <= v < 8.8.0.12 CVEs
< 6.4.4.201 CVE
< 6.4.4.211 CVE
< 6.4.4.241 CVE
< 8.2.2.101 CVE
< 8.5.0.111 CVE
<= 3.31 CVE
<= 6.2.3.91 CVE
3.1 <= v <= 3.11 CVE
3.1.1 <= v <= 3.1.11 CVE
3.2 <= v <= 3.21 CVE
3.3.1.29 <= v <= 3.3.1.291 CVE
3.3.1.30 <= v <= 3.3.1.301 CVE
3.3.2.14 <= v <= 3.3.2.141 CVE
3.4.0 <= v <= 3.4.01 CVE
6.1.2.3 <= v <= 6.1.2.31 CVE
6.1.3.3 <= v <= 6.1.3.31 CVE
6.1.3.7 <= v <= 6.1.3.71 CVE
6.1.3.7 <= v <= 6.5.4.201 CVE
6.1.3.8 <= v <= 6.1.3.81 CVE
6.1.3.9 <= v <= 6.1.3.91 CVE
6.1.4.2 <= v <= 6.1.4.21 CVE
6.2.0.0 <= v <= 6.2.0.01 CVE
6.2.0.1 <= v <= 6.2.0.11 CVE
6.2.0.2 <= v <= 6.2.0.21 CVE
6.2.3.1 <= v <= 6.2.3.11 CVE
6.2.3.2 <= v <= 6.2.3.21 CVE
6.2.3.3 <= v <= 6.2.3.31 CVE
6.2.3.4 <= v <= 6.2.3.41 CVE
6.2.3.5 <= v <= 6.2.3.51 CVE
6.2.3.6 <= v <= 6.2.3.61 CVE
6.2.3.7 <= v <= 6.2.3.71 CVE
6.2.3.8 <= v <= 6.2.3.81 CVE
6.3.0.0 <= v <= 6.3.0.01 CVE
6.3.1 <= v < 6.3.1.251 CVE
6.3.1 <= v <= 6.3.11 CVE
6.3.1.1 <= v <= 6.3.1.11 CVE
6.3.1.10 <= v <= 6.3.1.101 CVE
6.3.1.11 <= v <= 6.3.1.111 CVE
6.3.1.12 <= v <= 6.3.1.121 CVE
6.3.1.13 <= v <= 6.3.1.131 CVE
6.3.1.14 <= v <= 6.3.1.141 CVE
6.3.1.2 <= v <= 6.3.1.21 CVE
6.3.1.3 <= v <= 6.3.1.31 CVE
6.3.1.4 <= v <= 6.3.1.41 CVE
6.3.1.5 <= v <= 6.3.1.51 CVE
6.3.1.6 <= v <= 6.3.1.61 CVE
6.3.1.7 <= v <= 6.3.1.71 CVE
6.3.1.8 <= v <= 6.3.1.81 CVE
6.3.1.9 <= v <= 6.3.1.91 CVE
6.3.11 <= v <= 6.3.111 CVE
6.4.2.1 <= v <= 6.4.2.11 CVE
6.4.2.3 <= v <= 6.4.2.31 CVE
6.4.2.4 <= v <= 6.4.2.41 CVE
6.4.2.5 <= v <= 6.4.2.51 CVE
6.4.4.0 <= v < 6.4.4.161 CVE
6.4.4.0 <= v < 6.4.4.201 CVE
6.5.0.0 <= v < 6.5.1.91 CVE
6.5.0.0 <= v < 6.5.4.131 CVE
6.5.0.0 <= v < 6.5.4.181 CVE
6.5.3.0 <= v < 6.5.3.31 CVE
6.5.3.0 <= v < 6.5.3.91 CVE
6.5.4.0 <= v < 6.5.4.111 CVE
6.5.4.0 <= v < 6.5.4.191 CVE
6.5.4.0 <= v < 6.5.4.21 CVE
6.5.4.0 <= v < 6.5.4.91 CVE
6.5.4.12 <= v < 8.2.1.01 CVE
8.0.0.0 <= v < 8.2.2.101 CVE
8.0.0.0 <= v < 8.2.2.21 CVE
8.0.0.0 <= v < 8.2.2.61 CVE
8.0.0.0 <= v < 8.3.0.01 CVE
8.0.0.0 <= v < 8.8.0.01 CVE
8.1.0.0 <= v < 8.1.0.41 CVE
8.2.1.1 <= v < 8.3.0.01 CVE
8.3.0.0 <= v < 8.3.0.41 CVE
8.3.0.0 <= v < 8.3.0.71 CVE
8.4.0.0 <= v < 8.4.0.31 CVE
8.4.0.4 <= v < 8.5.0.01 CVE
8.5.0.0 <= v < 8.5.0.111 CVE
8.6.0.0 <= v < 8.6.0.111 CVE
8.6.0.0 <= v <= 8.10.0.131 CVE
8.7.0.0 <= v < 8.7.1.11 CVE
8.7.0.0 <= v < 8.7.1.31 CVE
8.8.0.0 <= v <= 8.9.031 CVE

Fixed in

10.4.0.042 CVEs
8.10.0.2226 CVEs
8.12.0.726 CVEs
8.13.1.226 CVEs
10.4.1.1125 CVEs
10.7.2.325 CVEs
> 10.4.1.018 CVEs
> 10.5.1.018 CVEs
10.4.1.118 CVEs
10.5.1.118 CVEs
10.4.1.016 CVEs
10.5.1.016 CVEs
6.5.5.016 CVEs
8.10.0.1016 CVEs
8.11.2.116 CVEs
8.8.0.016 CVEs
10.4.0.215 CVEs
8.10.0.015 CVEs
8.7.0.015 CVEs
8.9.0.015 CVEs
10.4.0.314 CVEs
10.4.1.913 CVEs
10.7.2.113 CVEs
8.10.0.1913 CVEs
8.12.0.613 CVEs
8.13.1.013 CVEs
10.3.1.112 CVEs
8.10.0.712 CVEs
8.11.1.112 CVEs
8.10.0.2111 CVEs
8.13.1.111 CVEs
6.5.4.2210 CVEs
8.3.0.1610 CVEs
8.6.0.1710 CVEs
8.7.1.910 CVEs
8.6.0.219 CVEs
10.3.0.18 CVEs
8.5.0.128 CVEs
8.7.1.47 CVEs
> 10.6.0.26 CVEs
> 8.10.0.136 CVEs
10.4.1.106 CVEs
10.6.0.16 CVEs
10.7.2.26 CVEs
6.5.4.236 CVEs
8.6.0.186 CVEs
8.7.1.106 CVEs
> 10.4.0.35 CVEs
> 10.4.1.45 CVEs
> 10.5.0.15 CVEs
> 8.10.0.95 CVEs
> 8.11.2.05 CVEs
> 8.12.0.15 CVEs
10.7.0.05 CVEs
6.4.4.255 CVEs
8.5.0.135 CVEs
8.6.0.85 CVEs
8.6.0.95 CVEs
8.7.1.25 CVEs
10.4.1.74 CVEs
10.6.0.04 CVEs
10.7.1.14 CVEs
6.5.4.204 CVEs
8.10.0.164 CVEs
8.12.0.44 CVEs
8.5.0.114 CVEs
8.6.0.64 CVEs
> 10.4.1.133 CVEs
10.4.1.23 CVEs
10.4.1.43 CVEs
8.3.0.153 CVEs
8.6.0.223 CVEs
8.7.1.03 CVEs
> 10.4.0.02 CVEs
> 10.4.0.22 CVEs
> 10.5.0.02 CVEs
> 10.6.0.02 CVEs
> 8.12.0.02 CVEs
> 8.9.0.02 CVEs
10.7.2.02 CVEs
6.4.4.202 CVEs
8.2.2.102 CVEs
8.3.0.02 CVEs
8.3.0.142 CVEs
8.6.0.72 CVEs
8.8.0.12 CVEs
6.3.1.251 CVE
6.4.4.161 CVE
6.4.4.211 CVE
6.4.4.241 CVE
6.5.1.91 CVE
6.5.3.31 CVE
6.5.3.91 CVE
6.5.4.111 CVE
6.5.4.131 CVE
6.5.4.181 CVE
6.5.4.191 CVE
6.5.4.21 CVE
6.5.4.91 CVE
8.1.0.41 CVE
8.2.1.01 CVE
8.2.2.21 CVE
8.2.2.61 CVE
8.3.0.41 CVE
8.3.0.71 CVE
8.4.0.31 CVE
8.5.0.01 CVE
8.6.0.111 CVE
8.7.1.11 CVE
8.7.1.31 CVE

Find a version

242 CVEs

Sort

Authenticated Command Injection Vulnerabilities in Command Line Interface (CLI) Service Accessed by PAPI Protocol of AOS-8 and AOS-10 Operating Systems
CVE-2026-44871
Patch
CWE-77
High · CVSS 8.8
EPSS 1.2% (65th pct)2026-05-12
Insufficient Session Invalidation on User Account Deactivation in AOS-8 Operating System
CVE-2026-44873
Patch
CWE-613
Medium · CVSS 5.4
EPSS 0.1% (4th pct)2026-05-12
Authenticated Arbitrary File Download via AOS-10 Web-Based Management Interface
CVE-2026-44874
Patch
CWE-284
Medium · CVSS 4.9
EPSS 0.3% (22th pct)2026-05-12
Authenticated Arbitrary File Upload via Command Injection in AOS-8 AND AOS-10 Web-Based Management Interface
CVE-2026-44872
Patch
CWE-77
High · CVSS 7.2
EPSS 0.8% (53th pct)2026-05-12
Authenticated Command Injection Vulnerabilities in Command Line Interface (CLI) Service Accessed by PAPI Protocol of AOS-8 and AOS-10 Operating Systems
CVE-2026-44870
Patch
CWE-77
High · CVSS 8.8
EPSS 0.9% (55th pct)2026-05-12
Authenticated Command Injection Vulnerabilities in the Web-Based Management Interface of AOS-8 and AOS-10
CVE-2026-44869
Patch
CWE-77
High · CVSS 8.8
EPSS 0.9% (55th pct)2026-05-12
Authenticated Command Injection Vulnerabilities in the Web-Based Management Interface of AOS-8 and AOS-10
CVE-2026-44868
Patch
CWE-77
High · CVSS 8.8
EPSS 0.9% (55th pct)2026-05-12
Authenticated Command Injection Vulnerabilities in the Web-Based Management Interface of AOS-8 and AOS-10
CVE-2026-44867
Patch
CWE-77
High · CVSS 8.8
EPSS 0.9% (55th pct)2026-05-12
Authenticated Command Injection Vulnerabilities in the Web-Based Management Interface of AOS-8 and AOS-10
CVE-2026-44866
Patch
CWE-77
High · CVSS 8.8
EPSS 0.9% (55th pct)2026-05-12
Authenticated Command Injection Vulnerabilities in the Web-Based Management Interface of AOS-8 and AOS-10
CVE-2026-44865
Patch
CWE-77
High · CVSS 7.2
EPSS 0.9% (56th pct)2026-05-12
Authenticated Remote Code Execution via SQL Injection in AOS-8 and AOS-10 Operating Systems
CVE-2026-44864
Patch
CWE-89
High · CVSS 7.2
EPSS 0.3% (23th pct)2026-05-12
Authenticated Remote Code Execution via SQL Injection in AOS-8 and AOS-10 Operating Systems
CVE-2026-44863
Patch
CWE-89
High · CVSS 7.2
EPSS 0.3% (23th pct)2026-05-12
Authenticated Remote Code Execution via SQL Injection in AOS-8 and AOS-10 Operating Systems
CVE-2026-44862
Patch
CWE-89
High · CVSS 7.2
EPSS 0.3% (23th pct)2026-05-12
Authenticated Remote Code Execution via SQL Injection in AOS-8 and AOS-10 Operating Systems
CVE-2026-44861
Patch
CWE-89
High · CVSS 7.2
EPSS 0.3% (23th pct)2026-05-12
Authenticated Remote Code Execution via SQL Injection in AOS-8 and AOS-10 Operating Systems
CVE-2026-44860
Patch
CWE-89
High · CVSS 7.2
EPSS 0.3% (23th pct)2026-05-12
Authenticated Stack-Based Buffer Overflow in PAPI Services
CVE-2026-44859
Patch
CWE-121
High · CVSS 7.2
EPSS 0.4% (28th pct)2026-05-12
Authenticated Stack-Based Buffer Overflow in PAPI Services
CVE-2026-44858
Patch
CWE-121
High · CVSS 7.2
EPSS 0.4% (27th pct)2026-05-12
Authenticated Stack-Based Buffer Overflow in PAPI Services
CVE-2026-44857
Patch
CWE-121
High · CVSS 7.2
EPSS 0.4% (27th pct)2026-05-12
Authenticated Stack-Based Buffer Overflow in PAPI Services
CVE-2026-44856
Patch
CWE-121
High · CVSS 7.2
EPSS 0.4% (27th pct)2026-05-12
Authenticated Stack-Based Buffer Overflow in PAPI Services
CVE-2026-44855
Patch
CWE-121
High · CVSS 7.2
EPSS 0.4% (27th pct)2026-05-12
Authenticated Remote Code Execution via Arbitrary File Write in AOS-8 and AOS-10 Web-Based Management Interface
CVE-2026-44854
Patch
CWE-77
High · CVSS 7.2
EPSS 1.0% (59th pct)2026-05-12
Authenticated Remote Code Execution via Arbitrary File Write in AOS-8 and AOS-10 Web-Based Management Interface
CVE-2026-44853
Patch
CWE-77
High · CVSS 7.2
EPSS 1.0% (59th pct)2026-05-12
Authenticated Remote Code Execution via Arbitrary File Overwrite in the AOS-8 and AOS-10 Web-Based Management Interface
CVE-2026-44852
Patch
CWE-296
High · CVSS 7.2
EPSS 0.4% (35th pct)2026-05-12
Unauthenticated Remote Code Execution via Heap Buffer Overflow in Network Management Service
CVE-2026-23827
Patch
CWE-122
High · CVSS 7.5
EPSS 0.5% (41th pct)2026-05-12
Unauthenticated Denial of Service in AOS-8 Network Management Service
CVE-2026-23826
Patch
CWE-770
High · CVSS 7.5
EPSS 0.4% (33th pct)2026-05-12
Unauthenticated Denial-of-Service via Crafted Messages in a Network Protocol Handling Component
CVE-2026-23825
Patch
CWE-20
High · CVSS 7.5
EPSS 0.3% (25th pct)2026-05-12
Unauthenticated Denial-of-Service via Crafted Messages in a Network Protocol Handling Component
CVE-2026-23824
Patch
CWE-400
High · CVSS 7.5
EPSS 0.3% (25th pct)2026-05-12
Security Boundary Bypass via Routing Node Impersonation
CVE-2026-23812
Patch
CWE-300
Medium · CVSS 4.3
EPSS 0.1% (4th pct)2026-03-04
Unauthorized Bi-Directional Traffic Interception via L2/L3 Manipulation
CVE-2026-23811
Patch
CWE-300
Medium · CVSS 4.3
EPSS 0.2% (5th pct)2026-03-04
Cross-BSSID GTK Re-encryption and Traffic Injection
CVE-2026-23810
Patch
CWE-300
Medium · CVSS 4.3
EPSS 0.2% (8th pct)2026-03-04

Showing 30 of 242

Common weakness types

The CWE weakness categories most often found in arubanetworks arubaos CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many arubanetworks arubaos CVEs were published each year.

2014

2015

2017

2018

2019

2020

2021

2022

2023

2024

2025

2026

Other arubanetworks products

Browse vulnerabilities for other products by arubanetworks.

clearpass policy manager136 CVEs sd-wan112 CVEs instant62 CVEs airwave36 CVEs clearpass35 CVEs 701033 CVEs 703033 CVEs 720533 CVEs

All arubanetworks vulnerabilities

Frequently asked questions

Common questions about arubanetworks arubaos vulnerabilities.

How many CVEs does arubanetworks arubaos have?: arubanetworks arubaos has 242 published CVE records since 2008.
How many arubanetworks arubaos CVEs are in CISA KEV?: None of arubanetworks arubaos's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for arubanetworks arubaos vulnerabilities?: Yes — 3 of arubanetworks arubaos's CVEs have a known public exploit.
Which versions of arubanetworks arubaos are affected?: 305 distinct arubanetworks arubaos versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in arubanetworks arubaos CVEs?: arubanetworks arubaos's CVEs most often map to these CWE weakness types: CWE-77 (Improper Neutralization of Special Elements used in a Command ('Command Injection')), CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')), CWE-121 (Stack-based Buffer Overflow), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')).
How many critical arubanetworks arubaos vulnerabilities are there?: arubanetworks arubaos has 55 critical and 132 high-severity CVEs.
What is the average severity of arubanetworks arubaos CVEs?: The average CVSS base score across arubanetworks arubaos's scored CVEs is 7.6.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track arubanetworks arubaos vulnerabilities

Monitor new arubanetworks arubaos vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing