# HPE Aruba Networking AOS-10 vulnerabilities

Source: https://junglewise.ai/threats/technologies/aos-10  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Updated: 9 November 2026, 03:07 UTC. Rebuilt every hour.  
Data: https://junglewise.ai/threats/technologies/aos-10.json  
License: CC BY 4.0 with a link back

Junglewise Threat Intelligence has tracked 27 vulnerabilities in HPE Aruba Networking AOS-10: 0 in the last 7 days and 0 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-44871, was published on 12 May 2026.

## Counts

- Last 7 days: 0
- Last 30 days: 0
- Last 90 days: 0
- All time: 27 (0 critical, 0 exploited in the wild)

## About HPE Aruba Networking AOS-10

A cloud-native operating system for managing Aruba access points and gateways.

## Latest HPE Aruba Networking AOS-10 vulnerabilities

- [CVE-2026-44871: HPE Aruba AOS command injection in CLI service via PAPI protocol](https://junglewise.ai/threats/cve-2026-44871-hpe-aruba-aos-command-injection-in-cli-service-via-papi-protocol) (high, CVSS 7.2, published 12 May 2026)
- [CVE-2026-44870: HPE Aruba AOS command injection in CLI service via PAPI protocol](https://junglewise.ai/threats/cve-2026-44870-hpe-aruba-aos-command-injection-in-cli-service-via-papi-protocol) (high, CVSS 7.2, published 12 May 2026)
- [CVE-2026-44869: HPE Aruba Networking AOS command injection in web management interface](https://junglewise.ai/threats/cve-2026-44869-hpe-aruba-networking-aos-command-injection-in-web-management) (high, CVSS 7.2, published 12 May 2026)
- [CVE-2026-44868: HPE Aruba Networking AOS command injection in web management interface](https://junglewise.ai/threats/cve-2026-44868-hpe-aruba-networking-aos-command-injection-in-web-management) (high, CVSS 7.2, published 12 May 2026)
- [CVE-2026-44867: HPE Aruba AOS command injection in web management interface](https://junglewise.ai/threats/cve-2026-44867-hpe-aruba-aos-command-injection-in-web-management-interface) (high, CVSS 7.2, published 12 May 2026)
- [CVE-2026-44866: HPE Aruba Networking AOS command injection in web management interface](https://junglewise.ai/threats/cve-2026-44866-hpe-aruba-networking-aos-command-injection-in-web-management) (high, CVSS 7.2, published 12 May 2026)
- [CVE-2026-44865: HPE Aruba Networking AOS command injection in web management interface](https://junglewise.ai/threats/cve-2026-44865-hpe-aruba-networking-aos-command-injection-in-web-management) (high, CVSS 7.2, published 12 May 2026)
- [CVE-2026-44864: Aruba AOS SQL injection in CLI and management protocol](https://junglewise.ai/threats/cve-2026-44864-aruba-aos-sql-injection-in-cli-and-management-protocol) (high, CVSS 7.2, published 12 May 2026)
- [CVE-2026-44863: HPE Aruba Networking AOS SQL injection in management interface](https://junglewise.ai/threats/cve-2026-44863-hpe-aruba-networking-aos-sql-injection-in-management-interface) (high, CVSS 7.2, published 12 May 2026)
- [CVE-2026-44862: HPE Aruba Networking AOS SQL injection in CLI and management protocol](https://junglewise.ai/threats/cve-2026-44862-hpe-aruba-networking-aos-sql-injection-in-cli-and-management) (high, CVSS 7.2, published 12 May 2026)
- [CVE-2026-44861: Aruba AOS SQL injection in CLI and management protocols](https://junglewise.ai/threats/cve-2026-44861-aruba-aos-sql-injection-in-cli-and-management-protocols) (high, CVSS 7.2, published 12 May 2026)
- [CVE-2026-44860: HPE Aruba Networking AOS SQL injection in CLI and management protocol](https://junglewise.ai/threats/cve-2026-44860-hpe-aruba-networking-aos-sql-injection-in-cli-and-management) (high, CVSS 7.2, published 12 May 2026)
- [CVE-2026-44859: Aruba AOS stack overflow in management CLI](https://junglewise.ai/threats/cve-2026-44859-aruba-aos-stack-overflow-in-management-cli) (high, CVSS 7.2, published 12 May 2026)
- [CVE-2026-44858: HPE Aruba Networking AOS stack overflow in management CLI](https://junglewise.ai/threats/cve-2026-44858-hpe-aruba-networking-aos-stack-overflow-in-management-cli) (high, CVSS 7.2, published 12 May 2026)
- [CVE-2026-44857: HPE Aruba Networking AOS stack overflow in management services](https://junglewise.ai/threats/cve-2026-44857-hpe-aruba-networking-aos-stack-overflow-in-management-services) (high, CVSS 7.2, published 12 May 2026)
- [CVE-2026-44856: HPE Aruba Networking AOS stack overflow in management services](https://junglewise.ai/threats/cve-2026-44856-hpe-aruba-networking-aos-stack-overflow-in-management-services) (high, CVSS 7.2, published 12 May 2026)
- [CVE-2026-44855: HPE Aruba Networking AOS stack overflow in management CLI](https://junglewise.ai/threats/cve-2026-44855-hpe-aruba-networking-aos-stack-overflow-in-management-cli) (high, CVSS 7.2, published 12 May 2026)
- [CVE-2026-44854: HPE Aruba Networking AOS command injection in web management interface](https://junglewise.ai/threats/cve-2026-44854-hpe-aruba-networking-aos-command-injection-in-web-management) (high, CVSS 7.2, published 12 May 2026)
- [CVE-2026-44853: HPE Aruba Networking AOS command injection in web management interface](https://junglewise.ai/threats/cve-2026-44853-hpe-aruba-networking-aos-command-injection-in-web-management) (high, CVSS 7.2, published 12 May 2026)
- [CVE-2026-44852: HPE Aruba Networking AOS-8 and AOS-10 RCE in web management interface](https://junglewise.ai/threats/cve-2026-44852-hpe-aruba-networking-aos-8-and-aos-10-rce-in-web-management) (high, CVSS 7.2, published 12 May 2026)
- [CVE-2026-23827: HPE Aruba Networking AOS heap overflow in Network management service](https://junglewise.ai/threats/cve-2026-23827-hpe-aruba-networking-aos-heap-overflow-in-network-management) (high, CVSS 7.5, published 12 May 2026)
- [CVE-2026-23825: HPE Aruba Networking AOS improper input validation in protocol-handling component](https://junglewise.ai/threats/cve-2026-23825-hpe-aruba-networking-aos-improper-input-validation-in-protocol) (high, CVSS 7.5, published 12 May 2026)
- [CVE-2026-23824: HPE Aruba AOS denial of service in protocol-handling component](https://junglewise.ai/threats/cve-2026-23824-hpe-aruba-aos-denial-of-service-in-protocol-handling-component) (high, CVSS 7.5, published 12 May 2026)
- [CVE-2026-23823: HPE Aruba AOS-10 command injection in CLI](https://junglewise.ai/threats/cve-2026-23823-hpe-aruba-aos-10-command-injection-in-cli) (high, CVSS 7.2, published 12 May 2026)
- [CVE-2026-23821: Aruba AOS-10 command injection in configuration processing logic](https://junglewise.ai/threats/cve-2026-23821-aruba-aos-10-command-injection-in-configuration-processing-logic) (high, CVSS 7.2, published 12 May 2026)

## Most severe HPE Aruba Networking AOS-10 vulnerabilities

- [CVE-2026-23819: HPE Aruba AOS Cross-Site Scripting in Web Management Interface](https://junglewise.ai/threats/cve-2026-23819-hpe-aruba-aos-cross-site-scripting-in-web-management-interface) (high, CVSS 8.8, published 12 May 2026)
- [CVE-2026-23827: HPE Aruba Networking AOS heap overflow in Network management service](https://junglewise.ai/threats/cve-2026-23827-hpe-aruba-networking-aos-heap-overflow-in-network-management) (high, CVSS 7.5, published 12 May 2026)
- [CVE-2026-23825: HPE Aruba Networking AOS improper input validation in protocol-handling component](https://junglewise.ai/threats/cve-2026-23825-hpe-aruba-networking-aos-improper-input-validation-in-protocol) (high, CVSS 7.5, published 12 May 2026)
- [CVE-2026-23824: HPE Aruba AOS denial of service in protocol-handling component](https://junglewise.ai/threats/cve-2026-23824-hpe-aruba-aos-denial-of-service-in-protocol-handling-component) (high, CVSS 7.5, published 12 May 2026)
- [CVE-2026-44852: HPE Aruba Networking AOS-8 and AOS-10 RCE in web management interface](https://junglewise.ai/threats/cve-2026-44852-hpe-aruba-networking-aos-8-and-aos-10-rce-in-web-management) (high, CVSS 7.2, published 12 May 2026)
- [CVE-2026-44871: HPE Aruba AOS command injection in CLI service via PAPI protocol](https://junglewise.ai/threats/cve-2026-44871-hpe-aruba-aos-command-injection-in-cli-service-via-papi-protocol) (high, CVSS 7.2, published 12 May 2026)
- [CVE-2026-44870: HPE Aruba AOS command injection in CLI service via PAPI protocol](https://junglewise.ai/threats/cve-2026-44870-hpe-aruba-aos-command-injection-in-cli-service-via-papi-protocol) (high, CVSS 7.2, published 12 May 2026)
- [CVE-2026-44869: HPE Aruba Networking AOS command injection in web management interface](https://junglewise.ai/threats/cve-2026-44869-hpe-aruba-networking-aos-command-injection-in-web-management) (high, CVSS 7.2, published 12 May 2026)
- [CVE-2026-44868: HPE Aruba Networking AOS command injection in web management interface](https://junglewise.ai/threats/cve-2026-44868-hpe-aruba-networking-aos-command-injection-in-web-management) (high, CVSS 7.2, published 12 May 2026)
- [CVE-2026-44867: HPE Aruba AOS command injection in web management interface](https://junglewise.ai/threats/cve-2026-44867-hpe-aruba-aos-command-injection-in-web-management-interface) (high, CVSS 7.2, published 12 May 2026)

## Vulnerabilities per week

Nothing was published in the last eight weeks.

| Week of | Vulns | Critical | Exploited |
| --- | --- | --- | --- |
| 17 Aug 2026 | 0 | 0 | 0 |
| 24 Aug 2026 | 0 | 0 | 0 |
| 31 Aug 2026 | 0 | 0 | 0 |
| 7 Sep 2026 | 0 | 0 | 0 |
| 14 Sep 2026 | 0 | 0 | 0 |
| 21 Sep 2026 | 0 | 0 | 0 |
| 28 Sep 2026 | 0 | 0 | 0 |
| 5 Oct 2026 | 0 | 0 | 0 |
| 12 Oct 2026 | 0 | 0 | 0 |
| 19 Oct 2026 | 0 | 0 | 0 |
| 26 Oct 2026 | 0 | 0 | 0 |
| 2 Nov 2026 | 0 | 0 | 0 |
| 9 Nov 2026 | 0 | 0 | 0 |

## Other HPE Aruba Networking technologies

- [HPE Aruba Networking AOS-8](https://junglewise.ai/threats/technologies/aos-8): 23 vulnerabilities
- [HPE Aruba Networking AOS-8 Instant](https://junglewise.ai/threats/technologies/aos-8-instant): 3 vulnerabilities

## Sources

NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "HPE Aruba Networking AOS-10 vulnerabilities", https://junglewise.ai/threats/technologies/aos-10, 9 November 2026.