CVE-2026-79890 Unauthenticated Command Injection Vulnerabilities in AOS-8 Accessed by the PAPI Protocol

There are command injection vulnerabilities in AOS-8 that could lead to unauthenticated remote code execution by sending specially crafted PAPI packets. Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating...

CVE-2026-79890

Technical details regarding CVE-2026-79890 are not publicly available in the provided documents. Action: monitor for updates.

CVE-2026-79889 Multiple Unauthenticated Buffer Overflow vulnerabilities in AOS-8 Web Interface result in Remote Code Execution

Vulnerabilities in multiple web interface endpoints of AOS-8 devices could allow an unauthenticated remote attacker to trigger a buffer overflow by using specially crafted requests. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system,...

CVE-2026-79888 Unauthenticated Buffer Overflow allows Remote Code Execution in web interface

A vulnerability in a certain web interface endpoint of AOS-8 devices could allow an unauthenticated remote attacker to trigger a buffer overflow. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system, leading to complete system compromise...

CVE-2026-79887

CVE-2026-79887 involves an Authentication Bypass in the Web Interface of AOS-8 that allows for Remote Command Execution (RCE) . While the provided documents do not specify the exact root cause or affected versions, the vulnerability is assigned a High severity (CVSS 3.1 score of 8.1) with impacts...

CVE-2026-79882

CVE-2026-79882 identifies an Unauthenticated Adjacent Command Injection Vulnerability in the PAPI Protocol of AOS-10 . This vulnerability allows for unauthorized command execution via adjacent network access. The provided documents do not specify the exact root cause, specific affected versions, ...

CVE-2026-79879

CVE-2026-79879 identifies unauthenticated adjacent memory corruption vulnerabilities in AOS-10 . These flaws can lead to Remote Code Execution (RCE). The vulnerability is accessible via an adjacent attack vector with a CVSS v3.1 base score of 8.8 (HIGH) , potentially impacting confidentiality, in...

CVE-2026-79878

A vulnerability exists in the AOS-8 Command Line Interface when accessed by the PAPI Protocol . This unauthenticated adjacent command injection flaw allows an attacker to execute arbitrary commands. The impact is rated as High severity (CVSS 8.8) with significant effects on confidentiality, integ...

CVE-2026-79877

Technical details for CVE-2026-79877 are not publicly available in the provided documents. Monitor for further updates regarding this entry.

CVE-2026-79872

Technical details for CVE-2026-79872 are not publicly available in the provided documents. Action: monitor for updates.

CVE-2026-79865

CVE-2026-79865 identifies an unauthenticated adjacent memory corruption vulnerability in AOS-10 that can lead to Remote Code Execution . While specific technical root causes are not detailed, the vulnerability allows for remote exploitation. No specific exploit links or remediation details are pr...

CVE-2026-79861

CVE-2026-79861 identifies an unauthenticated command injection vulnerability within the PAPI Protocol of AOS-10 . Although the provided documents do not include specific technical details regarding the root cause, affected versions, or remediation steps, the vulnerability is classified as CRITICA...

CVE-2026-79860

Technical details for CVE-2026-79860 are not publicly available in the provided documents. While the title mentions unauthenticated buffer overflow vulnerabilities leading to remote code execution in AOS-8 , no specific root cause, affected versions, or remediation steps are provided. Monitor for...

CVE-2026-79859

The AOS-8 software is vulnerable to unauthenticated buffer overflow vulnerabilities. This flaw can lead to Remote Code Execution (RCE). No specific affected versions, root causes, or remediation details are provided in the documents. No exploitation details or links are available.

CVE-2026-79857 Unauthenticated Command Injection Vulnerability in AOS-8 PAPI Protocol

There is a command injection vulnerability in the PAPI protocol Aruba's access point management protocol of AOS-8 that could lead to unauthenticated remote code execution by sending specially crafted packets to the affected UDP port. Successful exploitation of this vulnerability results in the...

CVE-2026-79857

Technical details for CVE-2026-79857 are not publicly available in the provided documents. Action: monitor for updates.

CVE-2026-79854 Unauthenticated SQL Injection Vulnerability leads to Remote Code Execution in AOS-10

A vulnerability in the affected interface of AOS-10 could allow an unauthenticated remote attacker to conduct SQL injection attacks against the AOS-10 instance. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system...

CVE-2026-79852 Unauthenticated SQL Injection allows Remote Code Execution in AOS Web-Based Management Interface

A vulnerability in the web-based management interface of AOS could allow an unauthenticated remote attacker to conduct SQL injection attacks against the AOS instance. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system...

CVE-2026-79851

A vulnerability exists in AOS-10 involving an unauthenticated buffer overflow that can lead to remote code execution . While the provided documents do not specify the exact component or root cause, the high severity score (10.0) indicates a significant risk to confidentiality, integrity, and avai...

CVE-2026-79849 Unauthenticated SQL Injection Vulnerabilities allow Remote Code Execution in AOS-8

Vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated remote attacker to conduct SQL injection attacks against an affected AOS-8 instance. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system...