Skip to content
OpenAdvisories
Medium · 4.9 CVE-2026-95719 EUVD-2026-108413GHSA-qmfc-997x-m6qj

Authenticated Arbitrary File Deletion Vulnerability leads to Denial-of-Service in AOS-10

Published Oct 22, 2026 · Updated Oct 23, 2026 · Assigned by hpe

Description

An arbitrary file deletion vulnerability exists in the command line interface of AOS-10 that could allow an authenticated attacker with administrative privileges to cause a denial of service. Successful exploitation could allow an attacker to crash the system, preventing it from rebooting without manual intervention and disrupting normal operation of the affected device.

Affected products

VendorProductAffectedFixed
Hewlett Packard Enterprise (HPE) ArubaOS (AOS) 10.8.0.0 – ≤ 10.8.1.1, 10.7.0.0 – ≤ 10.7.2.6, 10.4.0.0 – ≤ 10.4.1.13 —

Advisories 2

References