Skip to content
OpenAdvisories
Critical · 10.0 CVE-2026-79848 EUVD-2026-108348GHSA-9vqc-4w4j-4rr7

Unauthenticated SQL Injection Vulnerabilities allow Remote Code Execution in AOS-8

Published Oct 22, 2026 · Updated Oct 23, 2026 · Assigned by hpe

Description

Vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated remote attacker to conduct SQL injection attacks against an affected AOS-8 instance. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.

Affected products

VendorProductAffectedFixed
Hewlett Packard Enterprise (HPE) ArubaOS (AOS) 8.13.0.0 – ≤ 8.13.3.0, 8.10.0.0 – ≤ 8.10.0.23 —

Advisories 2

References