Filtered by vendor Hpe Subscriptions
Filtered by product Aos Subscriptions
Total 67 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2026-95720 1 Hpe 1 Aos 2026-10-26 4.4 Medium
A buffer overflow vulnerability exists in AOS-8 that could allow an authenticated attacker with administrative access to cause denial of service. Successful exploitation could allow an attacker to crash the system, preventing it from rebooting without manual intervention and disrupting network operations.
CVE-2026-95721 1 Hpe 1 Aos 2026-10-26 3.3 Low
A memory corruption vulnerability exists in the web-based management interface of AOS-8. Successful exploitation could allow an authenticated low privilege attacker with local access to view some system files and interrupt the normal operation of the affected service.
CVE-2026-79887 1 Hpe 1 Aos 2026-10-23 8.1 High
A vulnerability in the web interface of AOS-8 could allow an unauthenticated remote attacker to achieve remote code execution. Successful exploitation could lead to complete device control, enabling interception of network traffic and potential compromise of connected systems.
CVE-2026-95712 1 Hpe 1 Aos 2026-10-23 7.1 High
A sensitive information disclosure vulnerability in the PAPI protocol of AOS-8 could allow an unauthenticated adjacent attacker to access limited information handled by the affected service. Successful exploitation could allow an attacker to view some information and to disrupt the availability of the affected service.
CVE-2026-95706 1 Hpe 1 Aos 2026-10-23 7.2 High
Command injection vulnerabilities in the affected interface of AOS-8 could allow an authenticated remote attacker with high privileges to perform command injection. Successful exploitation could allow an attacker to execute commands with the privileges of the impacted mechanism on the underlying operating system.
CVE-2026-95710 1 Hpe 1 Aos 2026-10-23 7.1 High
An unauthenticated buffer overflow vulnerability exists in the underlying operating system of AOS-10 or AOS-8 and could allow an unauthenticated adjacent attacker to conduct a denial of service attack. Successful exploitation could allow an attacker to disrupt the availability of the affected system, with a limited impact to the integrity of the affected component.
CVE-2026-79894 1 Hpe 1 Aos 2026-10-23 7.5 High
An unauthenticated Denial-of-Service (DoS) vulnerability exists in the PAPI protocol of AOS-8. Successful exploitation of this vulnerability results in the ability to disrupt the availability of the affected interface.