Description
A command injection vulnerability in AOS-8 allows an authenticated privileged user to alter a package header to inject shell commands, potentially affecting the execution of internal operations. Successful exploit could allow an authenticated malicious actor to execute commands with the privileges of the impacted mechanism.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Hewlett Packard Enterprise (HPE) | ArubaOS (AOS) | 8.12.0.0 – ≤ 8.13.1.0, 8.10.0.0 – ≤ 8.10.0.20 | — |
Advisories 2
- NCSC-2026-0016 Kwetsbaarheden verholpen in Aruba Networks ArubaOS NCSC-NL (Netherlands) · Jan 16, 2026
- WID-SEC-2026-0091 Aruba ArubaOS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jan 13, 2026