CVE Tools
Track your stack

Arubaos (Aos)

105 CVEs tracked. None of them is in CISA KEV.

This hub aggregates every CVE we track for Arubaos (Aos), a product in the hardware firmware space. Use it to gauge the current risk picture and drill into individual advisories.

Arubaos (Aos) CVEs per month

Dec 2024 to Nov 2026. Point at a month, or focus the strip and use the arrow keys.
Arubaos (Aos) CVEs per month
MonthCVEs
2024-120
2025-010
2025-020
2025-030
2025-040
2025-050
2025-060
2025-070
2025-080
2025-090
2025-1017
2025-110
2025-120
2026-0112
2026-020
2026-030
2026-040
2026-055
2026-060
2026-070
2026-080
2026-090
2026-1071
2026-110

Severity

How the 105 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.

  • Critical3230%
  • High4846%
  • Medium2423%
  • Low11%

Latest CVEs

The 15 most recently published vulnerabilities affecting Arubaos (Aos).

  1. CVE-2026-95721Authenticated Local Memory Corruption Vulnerability in AOS-8 Web-Based Management Interface3.3
  2. CVE-2026-95720Authenticated Local Buffer Overflow Vulnerability leads to Denial-of-Service in AOS-84.4
  3. CVE-2026-95719Authenticated Arbitrary File Deletion Vulnerability leads to Denial-of-Service in AOS-104.9
  4. CVE-2026-95718Authentication Bypass Vulnerability in the PAPI Protocol of AOS-85.3
  5. CVE-2026-95717Authenticated Stored Cross-Site Scripting (XSS) Vulnerability in AOS Web-Based Management Interface5.5
  6. CVE-2026-95716Authentication Bypass in the PAPI Protocol of AOS-10 allows Unauthorized Configuration Changes6.5
  7. CVE-2026-95715Unauthenticated Local Command Injection Vulnerability in AOS-10 Command Line Interface6.8
  8. CVE-2026-95714Authenticated Adjacent Buffer Overflow Vulnerability leads to Remote Code Execution in AOS-106.8
  9. CVE-2026-95713Unauthenticated Buffer Overflow Vulnerability leads to Denial-of-Service in AOS-8 Command Line Interface7.0
  10. CVE-2026-95712Unauthenticated Adjacent Sensitive Information Disclosure and Denial-of-Service in AOS-8 via the PAPI Protocol7.1
  11. CVE-2026-95711Authentication Bypass Leading to Remote Code Execution in AOS-10 Web-Based Management Interface7.1
  12. CVE-2026-95710Unauthenticated Adjacent Buffer Overflow Vulnerability leads to Denial-of-Service in AOS-10 or AOS-87.1
  13. CVE-2026-95709Authenticated Command Injection Vulnerabilities in AOS-107.2
  14. CVE-2026-95708Authenticated File Write leads to Command Injection Vulnerabilities in AOS-107.2
  15. CVE-2026-95707Authenticated Buffer Overflow Vulnerability leads to Remote Code Execution in AOS-87.2

Product grouping is registry-driven, with AI assist and human review. How it works