CVE-2026-7984910.0Critical
Unauthenticated SQL Injection Vulnerabilities allow Remote Code Execution in AOS-8
Hewlett Packard Enterprise (HPE) · ArubaOS (AOS)
Not in CISA KEV
0.7%probability of exploitation in the next 30 days
53rd percentile
050100
Higher than 53% of scored CVEs
10.0CriticalCVSS
LowMediumHighCrit.
DescriptionNVD
Vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated remote attacker to conduct SQL injection attacks against an affected AOS-8 instance. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.
Coverage1 article · 1 outlet
First in our coverage: SecurityWeek, 27 Oct.
- HPE patches 72 flaws across Aruba networking productsSecurityWeek · first in our coverage · mentions it in passing
New articles also arrive in the RSS feed.