Hewlett Packard Enterprise (HPE) product
ArubaOS
Tracked since 23 Oct · latest article 27 Oct · RSS · API
None open
of 0 in the full CISA catalogue · all time
EPSS top 5%, not in KEV
usual rate
Exploited, by due date
No ArubaOS CVE is in the CISA KEV catalogue.
Patch cadence and exploit odds
How often CISA adds ArubaOS CVEs, how many have a fix, and where their exploit odds sit.
Added to CISA KEV per quarter
CISA has not added a ArubaOS CVE to KEV.
Fix listed
0 of 6 CVEs in coverage
6 CVEs have no vendor fix recorded yet.
EPSS percentile of each CVE
One dot per CVE; a red diamond marks those in CISA KEV.
Show as tableHide table
| CVE | EPSS percentile |
|---|---|
| CVE-2026-79846 | 71.8 |
| CVE-2026-79847 | 56.9 |
| CVE-2026-79848 | 53.1 |
| CVE-2026-79849 | 53.1 |
| CVE-2026-79844 | 52.5 |
| CVE-2026-79852 | 50.4 |
Coverage2 articles · all time
The latest 2 articles naming ArubaOS, in the shared story grammar.
2 articles from 2 outlets since 23 Oct. Picked up again today after 4 days quiet.
- Fri 23 Oct, 02:08 UTC. SecurityOnline, first report. HPE Patches 72 Wi-Fi Flaws, Including Critical Remote Code Bugs.
- Tue 27 Oct, 13:55 UTC. SecurityWeek, its first report on the story. HPE patches 72 flaws across Aruba networking products.
- CVE not in KEV
- No CVE
- Larger: an outlet’s first report
- Coverage over time
- Quiet time, folded
Show all 2 articles as a listHide the list
- Fri 23 OctDay 01
- HPE Patches 72 Wi-Fi Flaws, Including Critical Remote Code Bugs02:08 · SecurityOnline · First report
Quiet for 4 days
Tue 27 OctDay 41- HPE patches 72 flaws across Aruba networking products13:55 · SecurityWeek · Picked up again
All CVEs in coverage6
Exploited first, then by EPSS
Unauthenticated Command Injection Vulnerabilities in AOS-8
10.0Critical1.4% EPSS · 2 articlesUnauthenticated Buffer Overflow Vulnerabilities leads to Remote Code Execution in AOS-10
10.0Critical0.8% EPSS · 2 articlesUnauthenticated SQL Injection Vulnerabilities allow Remote Code Execution in AOS-8
10.0Critical0.7% EPSS · 2 articlesUnauthenticated SQL Injection Vulnerabilities allow Remote Code Execution in AOS-8
10.0Critical0.7% EPSS · 1 articleAuthentication Bypass Leading to Remote Code Execution in AOS-10
10.0Critical0.7% EPSS · 2 articlesUnauthenticated SQL Injection allows Remote Code Execution in AOS Web-Based Management Interface
9.8Critical0.6% EPSS · 1 article