Arubanetworks
690 CVEs across 214 Arubanetworks products. Browse Arubanetworks vulnerabilities, severities, and proof-of-concept exploits.
Arubanetworks products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-76717 | Medium | 5.3 | 2026-09-22 | A vulnerability exists in the Analytics and Location Engine (ALE) API that may allow for the disclosure of sensitive information. An unauthenticated remote att… |
CVE-2026-76716 | Medium | 5.3 | 2026-09-22 | Multiple vulnerabilities exist in the Analytics and Location Engine (ALE) that may allow for unauthorized access or denial of service. An unauthenticated remot… |
CVE-2026-76715 | High | 7.1 | 2026-09-22 | A vulnerability in an administrative component of Analytics and Location Engine (ALE) is vulnerable to a man-in-the-middle (MitM) attack. Successful exploitati… |
CVE-2026-76714 | High | 7.2 | 2026-09-22 | Vulnerabilities in the Analytics and Location Engine web interface allows remote authenticated users to run arbitrary commands on the underlying host. A succes… |
CVE-2026-76713 | High | 7.2 | 2026-09-22 | A vulnerability exists in the maintenance restore functionality of Analytics and Location Engine (ALE). Successful exploitation of this vulnerability could all… |
CVE-2026-76712 | High | 7.3 | 2026-09-22 | A vulnerability exists in the Analytics and Location Engine (ALE) that may allow for unauthorized access, information disclosure, or denial of service. An unau… |
CVE-2026-76711 | High | 7.5 | 2026-09-22 | A vulnerability exists in an Analytics and Location Engine (ALE) component where the impacted process improperly processes incoming socket connections. An unau… |
CVE-2026-76710 | High | 7.5 | 2026-09-22 | A vulnerability exists in the Analytics and Location Engine (ALE) management interface that may allow for the disclosure of sensitive information. An unauthent… |
CVE-2026-76709 | Critical | 9.8 | 2026-09-22 | A vulnerability exists in the internal administrative component of Analytics and Location Engine (ALE). Successful exploitation of this vulnerability could all… |
CVE-2026-76708 | Critical | 9.8 | 2026-09-22 | A vulnerability exists in the Analytics and Location Engine (ALE) where the application and underlying operating system use default, hard-coded credentials for… |
CVE-2026-76707 | Medium | 4.3 | 2026-09-15 | A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacent attacker to view some system memory contents. Successful… |
CVE-2026-76706 | Medium | 5.3 | 2026-09-15 | A vulnerability in the API endpoint of HPE Networking EdgeConnect SD-WAN Orchestrator could allow an unauthenticated remote attacker to obtain sensitive inform… |
CVE-2026-76705 | Medium | 5.5 | 2026-09-15 | A buffer overflow vulnerability exists in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways. Successful exploitation could allow an authenticated… |
CVE-2026-76704 | Medium | 5.5 | 2026-09-15 | A vulnerability in the web-based management interface of the EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to execute arbitrary… |
CVE-2026-76703 | Medium | 5.5 | 2026-09-15 | A buffer overflow vulnerability exists in the web-based management interface of HPE Networking EdgeConnect SD-WAN Gateways that could allow an authenticated at… |
CVE-2026-76702 | Medium | 5.8 | 2026-09-15 | A vulnerability in the operating system of HPE Networking EdgeConnect SD-WAN Gateways could allow an authenticated local attacker to cause a denial-of-service… |
CVE-2026-76701 | Medium | 5.9 | 2026-09-15 | A vulnerability in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated remote attacker to access sensitive informatio… |
CVE-2026-76700 | Medium | 5.9 | 2026-09-15 | Vulnerabilities in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated remote attacker to cause a denial-of-service. Successful exploitat… |
CVE-2026-76699 | Medium | 6.4 | 2026-09-15 | A buffer overflow vulnerability exists in a system service within the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways that could allo… |
CVE-2026-76698 | Medium | 6.5 | 2026-09-15 | A command injection vulnerability exists in the web-based management interface of HPE Networking EdgeConnect SD-WAN Gateways. An authenticated remote attacker… |
CVE-2026-76697 | Medium | 6.5 | 2026-09-15 | A vulnerability in the web-based management interface of HPE Networking EdgeConnect SD-WAN Gateways could allow a remote attacker authenticated with low privil… |
CVE-2026-76696 | Medium | 6.5 | 2026-09-15 | A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacent attacker to conduct a denial of service attack. Successfu… |
CVE-2026-76695 | Medium | 6.5 | 2026-09-15 | Buffer overflow vulnerabilities exist in the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways that could allow an unauthenticated remo… |
CVE-2026-76694 | Medium | 6.6 | 2026-09-15 | A privilege escalation vulnerability exists in the command line interface of HPE Networking EdgeConnect SD-WAN Gateways. Successful exploitation could allow an… |
CVE-2026-76693 | High | 7.0 | 2026-09-15 | A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated remote attacker to cause a denial-of-service against certain servi… |
CVE-2026-76692 | High | 7.1 | 2026-09-15 | A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacent attacker to obtain limited information from memory and di… |
CVE-2026-76691 | High | 7.2 | 2026-09-15 | Buffer overflow vulnerabilities exist in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways. Successful exploitation could allow an authenticated r… |
CVE-2026-76690 | High | 7.2 | 2026-09-15 | A vulnerability exists in a component of the HPE Networking EdgeConnect SD-WAN Gateways that may allow for arbitrary command execution. An authenticated remote… |
CVE-2026-76689 | High | 7.2 | 2026-09-15 | A vulnerability exists in the configuration processing logic of the affected component where malformed input is improperly processed. An authenticated remote a… |
CVE-2026-76688 | High | 7.5 | 2026-09-15 | Vulnerabilities have been identified in the web-based management interface of EdgeConnect SD-WAN Orchestrator that could potentially allow an unauthenticated r… |
CVE-2026-76687 | High | 7.5 | 2026-09-15 | A vulnerability in the API endpoint of HPE Networking EdgeConnect SD-WAN Orchestrator could allow a low-privilege authenticated remote attacker to escalate pri… |
CVE-2026-76686 | High | 7.5 | 2026-09-15 | A vulnerability exists in the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways. Successful exploitation could allow an unauthenticated… |
CVE-2026-76685 | High | 8.1 | 2026-09-15 | A vulnerability exists in the proxy packet processing logic of the affected component where it improperly processes malformed or truncated input. An unauthenti… |
CVE-2026-76684 | High | 8.1 | 2026-09-15 | Vulnerabilities have been identified in the API of HPE Networking EdgeConnect SD-WAN Orchestrator that could potentially allow an unauthenticated remote actor… |
CVE-2026-76683 | High | 8.1 | 2026-09-15 | Buffer overflow vulnerabilities exist in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways that could allow an unauthenticated remote attacker to… |
CVE-2026-76682 | High | 8.2 | 2026-09-15 | A vulnerability in the network security monitoring component of intrusion detection systems could allow an unauthenticated remote attacker to exploit a limited… |
CVE-2026-76681 | High | 8.5 | 2026-09-15 | A vulnerability in the API of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker with low privileges to access sensitive information… |
CVE-2026-76680 | High | 8.5 | 2026-09-15 | Vulnerabilities in the API of EdgeConnect SD-WAN Orchestrator could allow a remote attacker authenticated with low privileges to conduct server-side request fo… |
CVE-2026-76679 | High | 8.6 | 2026-09-15 | Vulnerabilities in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacent attacker to conduct denial-of-service attacks. Successful… |
CVE-2026-76678 | High | 8.8 | 2026-09-15 | A vulnerability in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways could allow a low-privilege authenticated remote attacker to escalate privile… |
CVE-2026-76677 | High | 8.8 | 2026-09-15 | A privilege escalation vulnerability exists in the API of EdgeConnect SD-WAN Gateways. Successful exploitation could allow a remote low-privileged authenticate… |
CVE-2026-76676 | High | 8.8 | 2026-09-15 | Buffer overflow vulnerabilities exist in the underlying operating system of EdgeConnect SD-WAN Gateways that could allow an unauthenticated adjacent attacker t… |
CVE-2026-76675 | Critical | 9.1 | 2026-09-15 | A command injection vulnerability exists in the command line interface of EdgeConnect SD-WAN Gateways. Successful exploitation could allow an authenticated rem… |
CVE-2026-76674 | Critical | 9.8 | 2026-09-15 | Buffer overflow vulnerabilities exist in the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways that could allow an unauthenticated remo… |
CVE-2026-76673 | Critical | 9.8 | 2026-09-15 | Vulnerabilities have been identified in the API of EdgeConnect SD-WAN Orchestrator that could potentially allow an unauthenticated remote actor to circumvent e… |
CVE-2026-76672 | Critical | 9.9 | 2026-09-15 | A vulnerability exists in the SD-WAN Orchestrator that may lead to the exposure of sensitive configuration information. An authenticated remote attacker with r… |
CVE-2026-76670 | Critical | 9.9 | 2026-09-15 | Privilege escalation vulnerabilities exist in the API of HPE Networking EdgeConnect SD-WAN Orchestrator. Successful exploitation could allow a remote low-privi… |
CVE-2026-76669 | Critical | 9.9 | 2026-09-15 | Privilege escalation vulnerabilities exist in the API of HPE Networking EdgeConnect SD-WAN Orchestrator. Successful exploitation could allow a remote low-privi… |
CVE-2026-76658 | Critical | 10.0 | 2026-09-01 | A vulnerability has been identified in the SSH daemon of HPE Networking Fabric Composer that could allow an unauthenticated remote attacker to gain administrat… |
CVE-2026-76657 | Critical | 10.0 | 2026-09-01 | Vulnerabilities have been identified in the API of HPE Networking Fabric Composer that could potentially allow an unauthenticated remote attacker to circumvent… |
CVE-2026-73748 | Low | 2.2 | 2026-09-01 | A vulnerability in the affected interface of HPE Networking Fabric Composer allows an attacker with administrative privileges to access sensitive information i… |
CVE-2026-73747 | Low | 2.5 | 2026-09-01 | A local privilege-escalation vulnerability has been discovered in HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low priv… |
CVE-2026-73746 | Low | 3.1 | 2026-09-01 | A denial-of-service vulnerability exists in the API of HPE Networking Fabric Composer that could allow an authenticated low privilege operator user to cause a… |
CVE-2026-73745 | Low | 3.1 | 2026-09-01 | A vulnerability in the API endpoint of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to view some information handled by the af… |
CVE-2026-73744 | Low | 3.5 | 2026-09-01 | A denial-of-service vulnerability exists in the web-based management interface of HPE Networking Fabric Composer that could allow an authenticated low privileg… |
CVE-2026-73743 | Low | 3.7 | 2026-09-01 | A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to gain insight into som… |
CVE-2026-73742 | Medium | 4.3 | 2026-09-01 | A vulnerability in an API endpoint of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to spoof the source address attri… |
CVE-2026-73741 | Medium | 4.3 | 2026-09-01 | A vulnerability in the API of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to view some system files. Successful exp… |
CVE-2026-73740 | Medium | 4.4 | 2026-09-01 | A local privilege escalation vulnerability in HPE Networking Fabric Composer could allow an authenticated privileged user on the underlying host to elevate the… |
CVE-2026-73739 | Medium | 4.4 | 2026-09-01 | A vulnerability exists in the API of HPE Networking Fabric Composer that allows for an attacker with administrative privileges to access sensitive information… |
CVE-2026-73738 | Medium | 4.7 | 2026-09-01 | A vulnerability in the underlying operating system of HPE Networking Fabric Composer could allow an authenticated low privilege operator user with local access… |
CVE-2026-73737 | Medium | 4.8 | 2026-09-01 | An unauthenticated path traversal vulnerability exists in the API endpoint of HPE Networking Fabric Composer. Successful exploitation could allow an unauthenti… |
CVE-2026-73736 | Medium | 5.3 | 2026-09-01 | A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to view some system file… |
CVE-2026-73735 | Medium | 5.4 | 2026-09-01 | Vulnerabilities in the API of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to access some information beyond their p… |
CVE-2026-73734 | Medium | 5.4 | 2026-09-01 | A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to redirect users to an… |
CVE-2026-73733 | Medium | 5.4 | 2026-09-01 | Authentication bypasses in the API of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to circumvent existing authentica… |
CVE-2026-73732 | Medium | 5.6 | 2026-09-01 | A vulnerability in the underlying operating system of HPE Networking Fabric Composer could allow an authenticated low privilege operator user with local access… |
CVE-2026-73731 | Medium | 6.1 | 2026-09-01 | A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to conduct a reflected c… |
CVE-2026-73730 | Medium | 6.5 | 2026-09-01 | A privilege escalation vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege op… |
CVE-2026-73729 | Medium | 6.5 | 2026-09-01 | A vulnerability in the underlying operating system of HPE Networking Fabric Composer could allow an authenticated low privilege operator user with local access… |
CVE-2026-73728 | Medium | 6.5 | 2026-09-01 | Denial-of-service vulnerabilities exist in the API of HPE Networking Fabric Composer that could allow an authenticated low privilege operator user to cause a d… |
CVE-2026-73727 | Medium | 6.5 | 2026-09-01 | Vulnerabilities in the API of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to access sensitive information. A succes… |
CVE-2026-73726 | Medium | 6.8 | 2026-09-01 | A vulnerability has been identified in the underlying operating system of HPE Networking Fabric Composer that could potentially allow an unauthenticated adjace… |
CVE-2026-73725 | High | 7.0 | 2026-09-01 | A local privilege-escalation vulnerability has been discovered in HPE Networking Fabric Composer. Successful exploitation of this vulnerability could allow a l… |
CVE-2026-73724 | High | 7.1 | 2026-09-01 | Privilege escalation vulnerabilities exist in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege ope… |
CVE-2026-73723 | High | 7.1 | 2026-09-01 | A privilege escalation vulnerability exists in the web-based management interface of HPE Networking Fabric Composer. Successful exploitation could allow an aut… |
CVE-2026-73722 | High | 7.2 | 2026-09-01 | Command injection vulnerabilities in the web-based management interface of HPE Networking Fabric Composer could allow an authenticated remote attacker to perfo… |
CVE-2026-73721 | High | 7.2 | 2026-09-01 | Vulnerabilities in the API of HPE Networking Fabric Composer could allow an authenticated remote attacker to conduct SQL injection attacks against the HPE Netw… |
CVE-2026-73720 | High | 7.2 | 2026-09-01 | Insecure file operations in the API of HPE Networking Fabric Composer could allow an authenticated remote attacker to achieve remote code execution. Successful… |
CVE-2026-73719 | High | 7.2 | 2026-09-01 | An arbitrary file write vulnerability exists in the API of HPE Networking Fabric Composer and could allow an authenticated administrative user to escalate priv… |
CVE-2026-73718 | High | 7.4 | 2026-09-01 | A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to access sensitive info… |
CVE-2026-73717 | High | 7.5 | 2026-09-01 | A command injection vulnerability exists in the web-based management interface of HPE Networking Fabric Composer that could allow an unauthenticated remote att… |
CVE-2026-73716 | High | 7.5 | 2026-09-01 | A remote code execution vulnerability exists in the underlying operating system of HPE Networking Fabric Composer that could allow an unauthenticated remote at… |
CVE-2026-73715 | High | 7.5 | 2026-09-01 | A vulnerability in the API of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to conduct a denial of service attack. Successful e… |
CVE-2026-73714 | High | 7.6 | 2026-09-01 | A sensitive information disclosure vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low… |
CVE-2026-73713 | High | 7.8 | 2026-09-01 | Local privilege-escalation vulnerabilities have been discovered in HPE Networking Fabric Composer. Successful exploitation of these vulnerabilities could allow… |
CVE-2026-73712 | High | 8.1 | 2026-09-01 | A vulnerability in the API of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host if… |
CVE-2026-73711 | High | 8.1 | 2026-09-01 | A privilege escalation vulnerability exists in the API endpoint of HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated remot… |
CVE-2026-73710 | High | 8.2 | 2026-09-01 | Vulnerabilities in an API endpoint of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to conduct a denial of service attack. Succ… |
CVE-2026-73709 | High | 8.3 | 2026-09-01 | A vulnerability in the underlying operating system of HPE Networking Fabric Composer could allow an unauthenticated adjacent attacker to run arbitrary commands… |
CVE-2026-73708 | High | 8.3 | 2026-09-01 | A business logic vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator… |
CVE-2026-73707 | High | 8.5 | 2026-09-01 | Privilege escalation vulnerabilities exist in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege ope… |
CVE-2026-73706 | High | 8.6 | 2026-09-01 | A vulnerability in the API of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to obtain limited system information and to change… |
CVE-2026-73705 | High | 8.8 | 2026-09-01 | An arbitrary file write vulnerability in the API of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to escalate privile… |
CVE-2026-73704 | High | 8.8 | 2026-09-01 | A command sanitization bypass exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator… |
CVE-2026-73703 | High | 8.8 | 2026-09-01 | A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated adjacent attacker to conduct a stored cr… |
CVE-2026-73702 | High | 8.8 | 2026-09-01 | A privilege escalation vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege op… |
CVE-2026-73701 | Critical | 9.0 | 2026-09-01 | An unauthenticated remote code execution vulnerability exists in the underlying operating system of HPE Networking Fabric Composer and could be exploited if ce… |
CVE-2026-73700 | Critical | 9.0 | 2026-09-01 | A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to conduct a s… |
CVE-2026-19766 | Critical | 9.6 | 2026-09-01 | An authentication bypass vulnerability exists in the underlying operating system of HPE Networking Fabric Composer. Successful exploitation could allow an unau… |