EUVD-2026-29817
GHSA-f86v-9v45-85xf
Severity by source
AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Management interface is network-reachable (AV:N) with low complexity, but exploitation requires an authenticated administrator (PR:H); injected commands give full OS control, so C/I/A all High.
Primary rating from NVD.
CVSS VectorNVD
Lifecycle Timeline
2DescriptionCVE.org
Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Successful exploitation of these vulnerabilities could allow an authenticated remote attacker to execute arbitrary commands on the underlying operating system.
AnalysisAI
Authenticated command injection in HPE Aruba Networking's AOS-8 and AOS-10 wireless operating systems lets a high-privileged remote user run arbitrary operating-system commands through the web-based management interface (CWE-77). Affected devices include Aruba mobility controllers and gateways running vulnerable AOS-8 and AOS-10 builds; the CVSS 3.1 base score is 7.2 (PR:H). There is no public exploit identified at time of analysis, EPSS is low (0.18%, 39th percentile), and CISA SSVC records no known exploitation, so this is a hardening priority rather than an active threat.
Technical ContextAI
AOS is the operating system powering HPE Aruba Networking wireless infrastructure - mobility controllers, gateways, and managed access points - where AOS-8 is the classic ArubaOS controller line and AOS-10 is the cloud-native successor managed via Aruba Central. The flaw is CWE-77 (Command Injection): input received by the device's web-based management interface is passed into an underlying shell or system call without adequate sanitization, so crafted parameters break out of the intended command context and execute attacker-supplied OS commands. Because the management plane runs with elevated system privileges, injected commands execute on the underlying operating system rather than being confined to the application. The affected component per CPE is cpe:2.3:a:hewlett_packard_enterprise_(hpe):hpe_aruba_networking_wireless_operating_system_(aos):*.
RemediationAI
Apply the fixed AOS builds published in HPE advisory hpesbnw05048en_us (https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05048en_us&docLocale=en_US); the last vulnerable builds per branch are 8.10.0.21, 8.12.0.6, 8.13.1.1, 10.4.1.10, 10.7.2.2, and 10.8.0.0, so upgrade to the next HPE-designated patched release above these for your branch (consult the advisory for the exact target build rather than assuming a version number). As a compensating control until patched, restrict access to the web-based management interface to a dedicated management VLAN or trusted admin subnet and block it from user and internet-facing networks (trade-off: legitimate remote admins must reach it via the management network or VPN). Enforce strong, unique administrator credentials with MFA and audit admin accounts, since exploitation requires an authenticated high-privileged session; also review management-interface logs for anomalous command activity. Patch status: released patched versions are available per the HPE advisory - cite the advisory for the exact fixed build for your deployment.
Remote code execution in HPE Aruba Networking Wireless Operating System (AOS-8 and AOS-10) allows an unauthenticated rem
Denial-of-service in HPE Aruba Networking Wireless Operating System (AOS-8) lets an unauthenticated remote attacker cras
Denial-of-service in HPE Aruba Networking Wireless Operating System (AOS-8 and AOS-10) allows a remote unauthenticated a
Denial-of-service in HPE Aruba Networking Wireless Operating System (AOS-8 and AOS-10) allows a remote unauthenticated a
Authenticated command injection in the web-based management interface of HPE Aruba Networking Wireless Operating System
Command injection in the web-based management interface of HPE Aruba Networking AOS-8 and AOS-10 wireless operating syst
Command injection in the web-based management interface of HPE Aruba Networking Wireless Operating System (AOS-8 and AOS
Authenticated command injection in HPE Aruba Networking Wireless Operating System (AOS-8 and AOS-10) lets a high-privile
Command injection in the web-based management interface of HPE Aruba Networking Wireless Operating System (AOS-8 and AOS
Authenticated command injection in the web-based management interface of HPE Aruba Networking AOS-8 and AOS-10 wireless
Authenticated command injection in the web-based management interface of HPE Aruba Networking Wireless Operating System
Authenticated command injection in HPE Aruba Networking Wireless Operating System (AOS-8 and AOS-10) allows a remote att
Same weakness CWE-77 – Command Injection
View allSame technique Command Injection
View allShare
External POC / Exploit Code
Leaving vuln.today