ArubaOS (AOS) vulnerabilities

82 known vulnerabilities in ArubaOS (AOS) from Hewlett Packard Enterprise. 82 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  ArubaOS (AOS): Improper Neutralization of Special Elements used in a Command

  CVE-2025-37133Oct 14, 2025Hewlett Packard EnterpriseEPSS 1.23%

  An authenticated command injection vulnerability exists in the CLI binary of an AOS-8 Controller/Mobility Conductor operating system. Successful exploitation could allow an authenticated malicious actor to execute arbitrary commands as a privileged user on the

• 7.2 High severity

  ArubaOS (AOS): Unrestricted Upload of File with Dangerous Type

  CVE-2025-37132Oct 14, 2025Hewlett Packard Enterprise

  An arbitrary file write vulnerability exists in the web-based management interface of both the AOS-10 GW and AOS-8 Controller/Mobility Conductor operating systems. Successful exploitation could allow an authenticated malicious actor to upload arbitrary files a