CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,500 CVEs published, 358 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
5,500
Show in the list
Critical, last 7 days
358
Show in the list
Healthcare-tagged, last 7 days
5
Show in the list
Known exploited (CISA KEV)
1,747
Show in the list

Showing CVEs that name the product arubanetworks:sd-wan. Show all products

42 CVEs, showing 1 to 42
CVESeverityTitlePublished
CVE-2026-44871High 8.8Command injection vulnerabilities exist in the command line interface (CLI) service accessed by the PAPI protocol of AOS-8 and AOS-10 Operating Systems.May 12, 2026
CVE-2026-44873Medium 5.4A session management vulnerability in AOS-8 allows previously authenticated users to retain network access after their accounts are administratively disabled.May 12, 2026
CVE-2026-44872High 7.2A command injection vulnerability exists in the web-based management interface of AOS-8 and AOS-10 Operating Systems.May 12, 2026
CVE-2026-44870High 8.8Command injection vulnerabilities exist in the command line interface (CLI) service accessed by the PAPI protocol of AOS-8 and AOS-10 Operating Systems.May 12, 2026
CVE-2026-44869High 8.8Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems.May 12, 2026
CVE-2026-44868High 8.8Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems.May 12, 2026
CVE-2026-44867High 8.8Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems.May 12, 2026
CVE-2026-44866High 8.8Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems.May 12, 2026
CVE-2026-44865High 7.2Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems.May 12, 2026
CVE-2026-44864High 7.2SQL injection vulnerabilities exist in several underlying service components accessible through the AOS-8 and AOS-10 command-line interface and management protocol.May 12, 2026
CVE-2026-44863High 7.2SQL injection vulnerabilities exist in several underlying service components accessible through the AOS-8 and AOS-10 command-line interface and management protocol.May 12, 2026
CVE-2026-44862High 7.2SQL injection vulnerabilities exist in several underlying service components accessible through the AOS-8 and AOS-10 command-line interface and management protocol.May 12, 2026
CVE-2026-44861High 7.2SQL injection vulnerabilities exist in several underlying service components accessible through the AOS-8 and AOS-10 command-line interface and management protocol.May 12, 2026
CVE-2026-44860High 7.2SQL injection vulnerabilities exist in several underlying service components accessible through the AOS-8 and AOS-10 command-line interface and management protocol.May 12, 2026
CVE-2026-44859High 7.2Stack-based buffer overflow vulnerabilities exist in several underlying management service components accessed through the command-line interface of the AOS-8 and AOS-10 Operating Systems.May 12, 2026
CVE-2026-44858High 7.2Stack-based buffer overflow vulnerabilities exist in several underlying management service components accessed through the command-line interface of the AOS-8 and AOS-10 Operating Systems.May 12, 2026
CVE-2026-44857High 7.2Stack-based buffer overflow vulnerabilities exist in several underlying management service components accessed through the command-line interface of the AOS-8 and AOS-10 Operating Systems.May 12, 2026
CVE-2026-44856High 7.2Stack-based buffer overflow vulnerabilities exist in several underlying management service components accessed through the command-line interface of the AOS-8 and AOS-10 Operating Systems.May 12, 2026
CVE-2026-44855High 7.2Stack-based buffer overflow vulnerabilities exist in several underlying management service components accessed through the command-line interface of the AOS-8 and AOS-10 Operating Systems.May 12, 2026
CVE-2026-44854High 7.2Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems.May 12, 2026
CVE-2026-44853High 7.2Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems.May 12, 2026
CVE-2026-44852High 7.2An authenticated remote code execution vulnerability exists in the AOS-8 and AOS-10 web-based management interface.May 12, 2026
CVE-2026-23827High 7.5A heap-based buffer overflow vulnerability exists in a Network management service of AOS-8 and AOS-10 that could allow an unauthenticated remote attacker to achieve remote code execution.May 12, 2026
CVE-2026-23826High 7.5A vulnerability in a network management service of AOS-8 Operating System could allow an unauthenticated remote attacker to exploit this vulnerability by sending specially crafted network packets to…May 12, 2026
CVE-2026-23825High 7.5Vulnerabilities exist in a protocol-handling component of AOS-8 and AOS-10 Operating Systems.May 12, 2026
CVE-2026-23824High 7.5Vulnerabilities exist in a protocol-handling component of AOS-8 and AOS-10 Operating Systems.May 12, 2026
CVE-2022-37912High 8.8Authenticated command injection vulnerabilities exist in the ArubaOS command line interface.Dec 12, 2022
CVE-2022-37911Medium 5.5Due to improper restrictions on XML entities multiple vulnerabilities exist in the command line interface of ArubaOS.Dec 12, 2022
CVE-2022-37910Medium 6.5A buffer overflow vulnerability exists in the ArubaOS command line interface.Dec 12, 2022
CVE-2022-37909Medium 5.3Aruba has identified certain configurations of ArubaOS that can lead to sensitive information disclosure from the configured ESSIDs.Dec 12, 2022
CVE-2022-37908Medium 6.5An authenticated attacker can impact the integrity of the ArubaOS bootloader on 7xxx series controllers.Dec 12, 2022
CVE-2022-37907High 7.5A vulnerability exists in the ArubaOS bootloader on 7xxx series controllers which can result in a denial of service (DoS) condition on an impacted system.Dec 12, 2022
CVE-2022-37906High 8.1An authenticated path traversal vulnerability exists in the ArubaOS command line interface.Dec 12, 2022
CVE-2022-37905High 8.8Vulnerabilities in ArubaOS running on 7xxx series controllers exist that allows an attacker to execute arbitrary code during the boot sequence.Dec 12, 2022
CVE-2022-37904High 8.8Vulnerabilities in ArubaOS running on 7xxx series controllers exist that allows an attacker to execute arbitrary code during the boot sequence.Dec 12, 2022
CVE-2022-37903High 8.8A vulnerability exists that allows an authenticated attacker to overwrite an arbitrary file with attacker-controlled content via the web interface.Dec 12, 2022
CVE-2022-37902High 7.2Authenticated command injection vulnerabilities exist in the ArubaOS command line interface.Dec 12, 2022
CVE-2022-37901High 7.2Authenticated command injection vulnerabilities exist in the ArubaOS command line interface.Dec 12, 2022
CVE-2022-37900High 7.2Authenticated command injection vulnerabilities exist in the ArubaOS command line interface.Dec 12, 2022
CVE-2022-37899High 7.2Authenticated command injection vulnerabilities exist in the ArubaOS command line interface.Dec 12, 2022
CVE-2022-37898High 7.2Authenticated command injection vulnerabilities exist in the ArubaOS command line interface.Dec 12, 2022
CVE-2022-37897Critical 9.8There is a command injection vulnerability that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks AP management protocol) U…Dec 12, 2022

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.