Skip to content

RadicalNotion.AI

We do not sell or share your personal information

© 2026 RadicalNotion.AI

Security Data

CWE Directory
CAPEC Directory
CNA Directory
CNA Report Cards
Data Sources

Calculators

CVSS Calculator
CVSS 4.0
CVSS 3.1
CVSS 3.0
CVSS 2.0

Platform

My Vulnerabilities
Insights
Notifications
Account
Pricing

Learn

All guides
What is a CVE?
What is CVSS?
The CISA KEV catalog
What is EPSS?

Company

About us
Blog
Book a demo

Get Started

Sign up
Log in

Legal

Privacy
Terms

Security data

Weaknesses (CWE)The MITRE CWE weakness catalog
Attack Patterns (CAPEC)MITRE CAPEC attack patterns
CNAsNumbering authorities + report cards
VendorsVulnerabilities by vendor

Tools

CVSS CalculatorScore CVSS 4.0, 3.1, 3.0 & 2.0

Resources

LearnPlain-English security guides
Data SourcesHow we source CVE data

About Us Blog Pricing Book a Demo

Log in

Home
Vendors
Arubanetworks
Arubaos

arubanetworks arubaos Vulnerabilities: CVEs, CISA KEV & Security Advisories

242 CVEs

arubanetworks arubaos Vulnerabilities

CVE security advisories and vulnerability history for arubaos by arubanetworks.

242

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

3

Public exploits

With known exploit

7.1

Avg CVSS

2008–2026

Last updated May 12, 2026

Overview

arubanetworks arubaos has 242 published CVE records since 2008, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 3 have a known public exploit. The average CVSS base score across scored CVEs is 7.1.

This page aggregates every publicly disclosed vulnerability (CVE) affecting arubanetworks arubaos, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of arubanetworks arubaos's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical33

High100

Medium63

Low2

44 additional CVEs have no CVSS severity score.

In CISA’s Known Exploited Vulnerabilities catalog

0

None of arubanetworks arubaos's CVEs are currently listed in CISA's KEV catalog.

Public exploits

3

3 of arubanetworks arubaos's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every arubanetworks arubaos version named in a CVE, then pick one to see only the CVEs that affect it.

Fixed in

Default status

All versions21 CVEs

Find a version

242 CVEs

Sort

Authenticated Command Injection Vulnerabilities in Command Line Interface (CLI) Service Accessed by PAPI Protocol of AOS-8 and AOS-10 Operating Systems
CVE-2026-44871
Patch
CWE-77
High · CVSS 7.2
EPSS 0.1% (23th pct)2026-05-12
Insufficient Session Invalidation on User Account Deactivation in AOS-8 Operating System
CVE-2026-44873
Patch
CWE-613
Medium · CVSS 5.4
EPSS 0.0% (11th pct)2026-05-12
Authenticated Arbitrary File Download via AOS-10 Web-Based Management Interface
CVE-2026-44874
Patch
CWE-284
Medium · CVSS 4.9
EPSS 0.0% (14th pct)2026-05-12
Authenticated Arbitrary File Upload via Command Injection in AOS-8 AND AOS-10 Web-Based Management Interface
CVE-2026-44872
Patch
CWE-77
High · CVSS 7.2
EPSS 0.3% (54th pct)2026-05-12
Authenticated Command Injection Vulnerabilities in Command Line Interface (CLI) Service Accessed by PAPI Protocol of AOS-8 and AOS-10 Operating Systems
CVE-2026-44870
Patch
CWE-77
High · CVSS 7.2
EPSS 0.2% (43th pct)2026-05-12
Authenticated Command Injection Vulnerabilities in the Web-Based Management Interface of AOS-8 and AOS-10
CVE-2026-44869
Patch
CWE-77
High · CVSS 7.2
EPSS 0.2% (41th pct)2026-05-12
Authenticated Command Injection Vulnerabilities in the Web-Based Management Interface of AOS-8 and AOS-10
CVE-2026-44868
Patch
CWE-77
High · CVSS 7.2
EPSS 0.2% (41th pct)2026-05-12
Authenticated Command Injection Vulnerabilities in the Web-Based Management Interface of AOS-8 and AOS-10
CVE-2026-44867
Patch
CWE-77
High · CVSS 7.2
EPSS 0.2% (41th pct)2026-05-12
Authenticated Command Injection Vulnerabilities in the Web-Based Management Interface of AOS-8 and AOS-10
CVE-2026-44866
Patch
CWE-77
High · CVSS 7.2
EPSS 0.2% (41th pct)2026-05-12
Authenticated Command Injection Vulnerabilities in the Web-Based Management Interface of AOS-8 and AOS-10
CVE-2026-44865
Patch
CWE-77
High · CVSS 7.2
EPSS 0.2% (44th pct)2026-05-12
Authenticated Remote Code Execution via SQL Injection in AOS-8 and AOS-10 Operating Systems
CVE-2026-44864
Patch
CWE-89
High · CVSS 7.2
EPSS 0.0% (12th pct)2026-05-12
Authenticated Remote Code Execution via SQL Injection in AOS-8 and AOS-10 Operating Systems
CVE-2026-44863
Patch
CWE-89
High · CVSS 7.2
EPSS 0.0% (12th pct)2026-05-12
Authenticated Remote Code Execution via SQL Injection in AOS-8 and AOS-10 Operating Systems
CVE-2026-44862
Patch
CWE-89
High · CVSS 7.2
EPSS 0.0% (12th pct)2026-05-12
Authenticated Remote Code Execution via SQL Injection in AOS-8 and AOS-10 Operating Systems
CVE-2026-44861
Patch
CWE-89
High · CVSS 7.2
EPSS 0.0% (12th pct)2026-05-12
Authenticated Remote Code Execution via SQL Injection in AOS-8 and AOS-10 Operating Systems
CVE-2026-44860
Patch
CWE-89
High · CVSS 7.2
EPSS 0.0% (12th pct)2026-05-12
Authenticated Stack-Based Buffer Overflow in PAPI Services
CVE-2026-44859
Patch
CWE-121
High · CVSS 7.2
EPSS 0.1% (28th pct)2026-05-12
Authenticated Stack-Based Buffer Overflow in PAPI Services
CVE-2026-44858
Patch
CWE-121
High · CVSS 7.2
EPSS 0.1% (28th pct)2026-05-12
Authenticated Stack-Based Buffer Overflow in PAPI Services
CVE-2026-44857
Patch
CWE-121
High · CVSS 7.2
EPSS 0.1% (28th pct)2026-05-12
Authenticated Stack-Based Buffer Overflow in PAPI Services
CVE-2026-44856
Patch
CWE-121
High · CVSS 7.2
EPSS 0.1% (28th pct)2026-05-12
Authenticated Stack-Based Buffer Overflow in PAPI Services
CVE-2026-44855
Patch
CWE-121
High · CVSS 7.2
EPSS 0.1% (28th pct)2026-05-12
Authenticated Remote Code Execution via Arbitrary File Write in AOS-8 and AOS-10 Web-Based Management Interface
CVE-2026-44854
Patch
CWE-77
High · CVSS 7.2
EPSS 0.3% (55th pct)2026-05-12
Authenticated Remote Code Execution via Arbitrary File Write in AOS-8 and AOS-10 Web-Based Management Interface
CVE-2026-44853
Patch
CWE-77
High · CVSS 7.2
EPSS 0.3% (55th pct)2026-05-12
Authenticated Remote Code Execution via Arbitrary File Overwrite in the AOS-8 and AOS-10 Web-Based Management Interface
CVE-2026-44852
Patch
CWE-296
High · CVSS 7.2
EPSS 0.1% (31th pct)2026-05-12
Unauthenticated Remote Code Execution via Heap Buffer Overflow in Network Management Service
CVE-2026-23827
Patch
CWE-122
High · CVSS 7.5
EPSS 0.2% (36th pct)2026-05-12
Unauthenticated Denial of Service in AOS-8 Network Management Service
CVE-2026-23826
Patch
CWE-770
High · CVSS 7.5
EPSS 0.1% (29th pct)2026-05-12
Unauthenticated Denial-of-Service via Crafted Messages in a Network Protocol Handling Component
CVE-2026-23825
Patch
CWE-20
High · CVSS 7.5
EPSS 0.1% (29th pct)2026-05-12
Unauthenticated Denial-of-Service via Crafted Messages in a Network Protocol Handling Component
CVE-2026-23824
Patch
CWE-400
High · CVSS 7.5
EPSS 0.0% (14th pct)2026-05-12
Security Boundary Bypass via Routing Node Impersonation
CVE-2026-23812
Patch
CWE-300
Medium · CVSS 4.3
EPSS 0.0% (7th pct)2026-03-04
Unauthorized Bi-Directional Traffic Interception via L2/L3 Manipulation
CVE-2026-23811
Patch
CWE-300
Medium · CVSS 4.3
EPSS 0.0% (7th pct)2026-03-04
Cross-BSSID GTK Re-encryption and Traffic Injection
CVE-2026-23810
Patch
CWE-300
Medium · CVSS 4.3
EPSS 0.0% (11th pct)2026-03-04

Showing 30 of 242

Common weakness types

The CWE weakness categories most often found in arubanetworks arubaos CVEs. Follow any weakness for its full explanation.

CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')38 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')22 CVEs
CWE-121Stack-based Buffer Overflow21 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')10 CVEs
CWE-400Uncontrolled Resource Consumption9 CVEs
CWE-284Improper Access Control8 CVEs
CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')5 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')3 CVEs

Disclosure activity by year

How many arubanetworks arubaos CVEs were published each year.

2014

1

2015

1

2017

1

2018

1

2019

3

2020

5

2021

15

2022

28

2023

66

2024

52

2025

19

2026

45

Other arubanetworks products

Browse vulnerabilities for other products by arubanetworks.

clearpass policy manager136 CVEs sd-wan112 CVEs instant62 CVEs airwave36 CVEs clearpass36 CVEs 701033 CVEs 703033 CVEs 720533 CVEs

All arubanetworks vulnerabilities

Frequently asked questions

Common questions about arubanetworks arubaos vulnerabilities.

How many CVEs does arubanetworks arubaos have?

arubanetworks arubaos has 242 published CVE records since 2008.

How many arubanetworks arubaos CVEs are in CISA KEV?

None of arubanetworks arubaos's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for arubanetworks arubaos vulnerabilities?

Yes — 3 of arubanetworks arubaos's CVEs have a known public exploit.

Which versions of arubanetworks arubaos are affected?

111 distinct arubanetworks arubaos versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in arubanetworks arubaos CVEs?

arubanetworks arubaos's CVEs most often map to these CWE weakness types: CWE-77 (Improper Neutralization of Special Elements used in a Command ('Command Injection')), CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')), CWE-121 (Stack-based Buffer Overflow), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')).

How many critical arubanetworks arubaos vulnerabilities are there?

arubanetworks arubaos has 33 critical and 100 high-severity CVEs.

What is the average severity of arubanetworks arubaos CVEs?

The average CVSS base score across arubanetworks arubaos's scored CVEs is 7.1.

References

All arubanetworks vulnerabilities
The MITRE CVE Program (opens in a new tab)
Learn: What is a CVE?
CWE directory: the weakness types these CVEs map to

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track arubanetworks arubaos vulnerabilities

Monitor new arubanetworks arubaos vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing

On this page

Overview
Severity and exploitation
Affected versions and CVEs
Common weakness types
Disclosure activity
Other products
FAQ
References