435 matches found
CVE-2026-95712
Technical details for CVE-2026-95712 are not publicly available in the provided documents. Please monitor for further updates.
CVE-2026-95712 Unauthenticated Adjacent Sensitive Information Disclosure and Denial-of-Service in AOS-8 via the PAPI Protocol
A sensitive information disclosure vulnerability in the PAPI protocol of AOS-8 could allow an unauthenticated adjacent attacker to access limited information handled by the affected service. Successful exploitation could allow an attacker to view some information and to disrupt the availability o...
CVE-2026-95707
CVE-2026-95707 identifies an authenticated buffer overflow vulnerability within AOS-8 . This flaw can lead to Remote Code Execution (RCE) . While specific technical root causes and affected versions are not detailed in the provided documents, the vulnerability carries a HIGH severity rating with ...
CVE-2026-95707 Authenticated Buffer Overflow Vulnerability leads to Remote Code Execution in AOS-8
A buffer overflow vulnerability in the PAPI protocol of AOS-8 could allow an authenticated remote attacker with high privileges to achieve remote code execution. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system...
CVE-2026-79955 Unauthenticated Memory Corruption Vulnerability leads to Denial-of-Service in AOS-8
An unauthenticated memory corruption vulnerability exists in a service accessed via the PAPI protocol in AOS-8 that could allow an unauthenticated remote attacker to conduct a denial of service attack. Successful exploitation could allow an attacker to disrupt the availability of the affected...
CVE-2026-79955
CVE-2026-79955 involves an unauthenticated memory corruption vulnerability in AOS-8 . This flaw can lead to a Denial-of-Service (DoS) condition. While the CVSS score indicates high availability impact, the provided documents do not specify the exact affected component, root cause, or remediation ...
CVE-2026-79894
CVE-2026-79894 involves an unauthenticated Denial-of-Service (DoS) vulnerability within the PAPI Protocol of AOS-8 . While the provided documents do not specify the exact root cause or specific affected versions, the CVSS 3.1 metrics indicate a High severity (7.5) with a Network attack vector and...
CVE-2026-79890 Unauthenticated Command Injection Vulnerabilities in AOS-8 Accessed by the PAPI Protocol
There are command injection vulnerabilities in AOS-8 that could lead to unauthenticated remote code execution by sending specially crafted PAPI packets. Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating...
CVE-2026-79886
CVE-2026-79886 is an unauthenticated buffer overflow vulnerability in AOS-8 that leads to a Denial-of-Service (DoS) condition. While specific technical details regarding the root cause are not provided, the vulnerability is rated with a High severity (CVSS 8.2). No specific exploit links or remed...
CVE-2026-79885
Technical details are not publicly available in the provided documents for CVE-2026-79885 . While the title suggests an unauthenticated file write vulnerability leading to denial-of-service in AOS-8 , the provided documents contain no specific details regarding the root cause, affected components...
CVE-2026-79883
CVE-2026-79883 identifies an unauthenticated adjacent buffer overflow vulnerability in the PAPI Protocol affecting AOS-10 . This vulnerability can lead to sensitive information disclosure . While the base CVSS score is 8.3 (High), the provided documents do not specify the exact root cause, affect...
CVE-2026-79882
CVE-2026-79882 identifies an Unauthenticated Adjacent Command Injection Vulnerability in the PAPI Protocol of AOS-10 . This vulnerability allows for unauthorized command execution via adjacent network access. The provided documents do not specify the exact root cause, specific affected versions, ...
CVE-2026-79878
A vulnerability exists in the AOS-8 Command Line Interface when accessed by the PAPI Protocol . This unauthenticated adjacent command injection flaw allows an attacker to execute arbitrary commands. The impact is rated as High severity (CVSS 8.8) with significant effects on confidentiality, integ...
CVE-2026-79875
CVE-2026-79875 involves an Authentication Bypass in the PAPI Protocol of AOS-8 . This vulnerability allows an attacker to gain unauthorized administrative access . While the CVSS score is 9.3 (Critical) with an Adjacent attack vector and High impact on confidentiality and integrity, the provided ...
CVE-2026-79873
A vulnerability exists in the PAPI Protocol of AOS-10 that allows for unauthenticated adjacent authentication bypasses . This flaw can lead to unauthorized administrative access . While the CVSS score indicates a CRITICAL severity (9.3) with high confidentiality and integrity impact, specific det...
CVE-2026-79870
Technical details regarding the root cause, specific components, or impacted versions for CVE-2026-79870 are not publicly available in the provided documents. While the CVE title mentions an Authentication Bypass leading to Unauthorized Access in AOS-8 , no further technical specifics or remediat...
CVE-2026-79866
CVE-2026-79866 is an unauthenticated adjacent path traversal vulnerability affecting AOS-8 . This flaw can lead to filesystem compromise . While the vulnerability is categorized as CRITICAL with a CVSS score of 9.6 , the provided documents do not specify the exact software component or the underl...
CVE-2026-79858 Unauthenticated SQL Injection Vulnerability in the PAPI Protocol of AOS-8
An unauthenticated SQL injection vulnerability exists in the PAPI protocol in AOS-8. Successful exploitation could allow an unauthenticated remote attacker to obtain and modify sensitive information in the underlying database and to interrupt the normal operation of the affected service...
CVE-2026-79858
CVE-2026-79858 involves an unauthenticated SQL Injection vulnerability in the PAPI Protocol of AOS-8 . While the documents do not provide specific technical details regarding the root cause or impact, the associated metrics indicate a CRITICAL severity score of 9.8. Specific exploit details and r...
CVE-2026-79857 Unauthenticated Command Injection Vulnerability in AOS-8 PAPI Protocol
There is a command injection vulnerability in the PAPI protocol Aruba's access point management protocol of AOS-8 that could lead to unauthenticated remote code execution by sending specially crafted packets to the affected UDP port. Successful exploitation of this vulnerability results in the...