EUVD-2026-29753
GHSA-jr3f-xhmv-xm9q
Vulnerability Assessment
| Weakness |
CWE
ASVS 5.0
V15 - Secure Coding and Architecture Heap buffer bounds checking
MITRE ATT&CK
1 technique across 1 tactic: Execution The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Jul 23, 2026
Remote code execution in HPE Aruba Networking Wireless Operating System (AOS-8 and AOS-10) allows an unauthenticated remote attacker to overflow a heap buffer in a network management service and run arbitrary code as a privileged OS user, or trigger a denial-of-service crash of the affected process. It affects Aruba mobility controllers and gateways across multiple 8.x and 10.x branches. No public exploit identified at time of analysis and it is not in CISA KEV; EPSS is low (0.12%, 30th percentile), and notably the vendor CVSS vector scores only availability impact despite the RCE claim.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 1 package in euvd
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Know when Hpe Aruba Networking Wireless Operating System Aos gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Primary rating from Vendor (hpe) · only source for this CVE.
CVSS VectorVendor: hpe
DescriptionCVE.org
A heap-based buffer overflow vulnerability exists in a Network management service of AOS-8 and AOS-10 that could allow an unauthenticated remote attacker to achieve remote code execution. Successful exploitation could allow an unauthenticated attacker to execute arbitrary code as a privileged user on the underlying operating system, potentially leading to a system compromise. Exploitation may also result in a denial-of-service (DoS) condition affecting the impacted system process.
Executive ViewAI
HPE Aruba Networking wireless controllers and gateways (AOS-8 and AOS-10) contain an unauthenticated remote code execution vulnerability allowing attackers to execute commands as privileged system users or crash wireless management infrastructure. This directly threatens enterprises relying on Aruba for enterprise wireless connectivity, with no patch currently available from the vendor. Leadership should prioritize immediate containment given the critical nature of network infrastructure at risk.
Within 24 hours, conduct a complete inventory of HPE Aruba Networking controllers and gateways deployed across your organization and identify all systems running AOS-8.x or AOS-10.x branches. Within 7 days, restrict network access to management interfaces through segmentation and firewall rules, disable remote management protocols (SSH, HTTPS) if operationally feasible, and enable comprehensive audit logging on affected systems. Within 30 days, contact HPE for patch timeline and workaround documentation, evaluate migration paths to unaffected AOS branches, and implement formal change control for any firmware updates once patches become available.
No vendor-released patch identified at time of analysis. Interim mitigations include: (1) network segmentation restricting access to administrative interfaces to trusted internal subnets only; (2) disabling unnecessary remote management services where operationally feasible; (3) implementing real-time alerting and detailed audit logging for authentication attempts and privileged process execution on affected systems; (4) developing an accelerated upgrade plan to non-vulnerable AOS branches; (5) increasing monitoring frequency for anomalous controller behavior and availability. No public exploit identified at time of analysis.
Threat Intelligence Overview
NVD
CVE.org
EPSS
Vulnrichment
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
A buffer overflow occurs when a program writes more data to a memory buffer than it was allocated to hold, causing the excess data to spill into adjacent memory regions.
A heap overflow occurs when a program writes data beyond the bounds of a buffer allocated in the heap memory region.
Remote Code Execution represents the critical moment when an attacker successfully runs arbitrary code on a target system without physical access.
Authenticated command injection in the CLI service reachable through the PAPI protocol on HPE Aruba Networking AOS-8 and
Command injection in the web-based management interface of HPE Aruba Networking AOS-8 and AOS-10 allows an authenticated
Authenticated command injection in the web-based management interface of HPE Aruba Networking Wireless Operating System
Command injection in the web-based management interface of HPE Aruba Networking Wireless Operating System (AOS-8 and AOS
Authenticated command injection in the web-based management interface of HPE Aruba Networking Wireless Operating System
Authenticated command injection in HPE Aruba Networking Wireless Operating System (AOS) 8.x and 10.x allows a remote use
Denial-of-service in HPE Aruba Networking Wireless Operating System (AOS-8) lets an unauthenticated remote attacker cras
Denial-of-service in HPE Aruba Networking Wireless Operating System (AOS-8 and AOS-10) allows a remote unauthenticated a
Denial-of-service in HPE Aruba Networking Wireless Operating System (AOS-8 and AOS-10) allows a remote unauthenticated a
Authenticated command injection in the web-based management interface of HPE Aruba Networking Wireless Operating System
Command injection in the web-based management interface of HPE Aruba Networking AOS-8 and AOS-10 wireless operating syst
Command injection in the web-based management interface of HPE Aruba Networking Wireless Operating System (AOS-8 and AOS
Exploit-DB