Search
37,428 CVEs · Critical severity
CVEs (37,428, showing first 500)
Only the first 500 CVEs (by current sort) are shown when searching without a keyword. Add a search term above to narrow the results.
Showing 51–75 of 37,428 (capped at 500)
| CVE ID | Severity ↑ | Patch | CVSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-79870 | CRITICAL | 9.6 | 2026-10-22 | An authentication bypass vulnerability in the PAPI protocol of AOS-8 could allow an unauthenticated adjacent attacker to circumvent existing authentication controls. Succes… | |
| CVE-2026-79871 | CRITICAL | 9.6 | 2026-10-22 | A sensitive information disclosure vulnerability in the command line interface of AOS-10 could allow an unauthenticated remote attacker to access sensitive information. Suc… | |
| CVE-2026-79872 | CRITICAL | 9.4 | 2026-10-22 | A buffer overflow vulnerability exists in the underlying operating system of AOS that could lead to unauthenticated remote code execution by an unauthenticated remote attac… | |
| CVE-2026-79873 | CRITICAL | 9.3 | 2026-10-22 | Authentication bypass vulnerabilities in the PAPI protocol of AOS-10 could allow an unauthenticated adjacent attacker to circumvent existing authentication controls. Succes… | |
| CVE-2026-79874 | CRITICAL | 9.3 | 2026-10-22 | An authentication bypass in the API of AOS-10 allows an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation could allo… | |
| CVE-2026-79875 | CRITICAL | 9.3 | 2026-10-22 | A vulnerability has been identified in the PAPI protocol of AOS-8 that could potentially allow an unauthenticated adjacent attacker to circumvent existing authentication co… | |
| CVE-2026-79858 | CRITICAL | 9.8 | 2026-10-22 | An unauthenticated SQL injection vulnerability exists in the PAPI protocol in AOS-8. Successful exploitation could allow an unauthenticated remote attacker to obtain and mo… | |
| CVE-2026-79859 | CRITICAL | 9.8 | 2026-10-22 | Buffer overflow vulnerabilities exist in the affected interface of AOS-8 that could lead to unauthenticated remote code execution. Successful exploitation could allow an at… | |
| CVE-2026-79860 | CRITICAL | 9.8 | 2026-10-22 | Buffer overflow vulnerabilities exist in an underlying service of AOS-8 that could lead to unauthenticated remote code execution by sending specially crafted packets destin… | |
| CVE-2026-79861 | CRITICAL | 9.8 | 2026-10-22 | There is a command injection vulnerability in AOS-10 that could lead to unauthenticated remote code execution by sending specially crafted PAPI packets. Successful exploita… | |
| CVE-2026-79862 | CRITICAL | 9.6 | 2026-10-22 | Buffer overflow vulnerabilities in the affected interface of AOS-10 or AOS-8 could allow an unauthenticated adjacent attacker to execute arbitrary code by sending specially… | |
| CVE-2026-79863 | CRITICAL | 9.6 | 2026-10-22 | Buffer overflow vulnerabilities in the affected interface of AOS-10 or AOS-8 could allow an unauthenticated adjacent attacker to execute arbitrary code by sending specially… | |
| CVE-2026-79864 | CRITICAL | 9.6 | 2026-10-22 | Command injection vulnerabilities exist in the affected interface of AOS-10 that could allow an unauthenticated adjacent attacker to perform command injection. Successful e… | |
| CVE-2026-79865 | CRITICAL | 9.6 | 2026-10-22 | A memory corruption vulnerability in the affected interface of AOS-10 could allow an unauthenticated adjacent attacker to achieve remote code execution. Successful exploita… | |
| CVE-2026-79866 | CRITICAL | 9.6 | 2026-10-22 | An unauthenticated path traversal vulnerability exists in the PAPI protocol in AOS-8. Successful exploitation of this vulnerability could allow an unauthenticated adjacent … | |
| CVE-2026-79849 | CRITICAL | 10.0 | 2026-10-22 | Vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated remote attacker to conduct SQL injection attacks against an affected AOS-8 instance. Succe… | |
| CVE-2026-79850 | CRITICAL | 10.0 | 2026-10-22 | Vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated remote attacker to bypass existing authentication controls and run arbitrary commands on t… | |
| CVE-2026-79851 | CRITICAL | 10.0 | 2026-10-22 | Buffer overflow vulnerabilities exist in the affected interface of AOS-10 that could lead to unauthenticated remote code execution. Successful exploitation could allow an a… | |
| CVE-2026-79852 | CRITICAL | 9.8 | 2026-10-22 | A vulnerability in the web-based management interface of AOS could allow an unauthenticated remote attacker to conduct SQL injection attacks against the AOS instance. Succe… | |
| CVE-2026-79853 | CRITICAL | 9.8 | 2026-10-22 | Sensitive information disclosure vulnerabilities in the affected interface of AOS-10 could allow an unauthenticated remote attacker to obtain sensitive information from the… | |
| CVE-2026-79854 | CRITICAL | 9.8 | 2026-10-22 | A vulnerability in the affected interface of AOS-10 could allow an unauthenticated remote attacker to conduct SQL injection attacks against the AOS-10 instance. Successful … | |
| CVE-2026-79855 | CRITICAL | 9.8 | 2026-10-22 | An authentication bypass vulnerability in the SSH daemon of AOS-8 allows an unauthenticated remote attacker to circumvent existing authentication controls. Successful explo… | |
| CVE-2026-79856 | CRITICAL | 9.8 | 2026-10-22 | A buffer overflow vulnerability exists in the PAPI protocol of AOS-8 that could allow an unauthenticated remote attacker to circumvent existing authentication controls. Suc… | |
| CVE-2026-79857 | CRITICAL | 9.8 | 2026-10-22 | There is a command injection vulnerability in the PAPI protocol (Aruba's access point management protocol) of AOS-8 that could lead to unauthenticated remote code execution… | |
| CVE-2026-79844 | CRITICAL | 10.0 | 2026-10-22 | Authentication bypass vulnerabilities in the affected interface of AOS-10 could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host if… |