HPE Aruba Networking Wireless Operating System (AOS-10 & AOS-8) vulnerabilities

2 known vulnerabilities in HPE Aruba Networking Wireless Operating System (AOS-10 & AOS-8) from Hewlett Packard Enterprise. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.6 High severity

  HPE Aruba Networking Wireless Operating System…: Uncontrolled Resource Consumption

  CVE-2026-23809Mar 4, 2026Hewlett Packard Enterprise

  A technique has been identified that adapts a known port-stealing method to Wi-Fi environments that use multiple BSSIDs. By leveraging the relationship between BSSIDs and their associated virtual ports, an attacker could potentially bypass inter-BSSID isolatio

• 8.1 High severity

  HPE Aruba Networking Wireless Operating System…: Improper Control of Generation of Code

  CVE-2026-23808Mar 4, 2026Hewlett Packard Enterprise

  A vulnerability has been identified in a standardized wireless roaming protocol that could enable a malicious actor to install an attacker-controlled Group Temporal Key (GTK) on a client device. Successful exploitation of this vulnerability could allow a remot