arubanetworks sd-wan

Name: arubanetworks sd-wan
Brand: arubanetworks

productUS

cpe:2.3:a:arubanetworks:sd-wan:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

by severity

16critical38high14medium1low

updated 2026-10-28

vulnerabilities (89)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2024-26305US	critical9.8	15.2% (97th)	—	no fix	2024-05-01	4 versions
CVE-2020-24633US	critical9.8	5.11% (92nd)	—	2.2.0.1	2020-12-11	2 versions
CVE-2022-37901US	high7.2	3.23% (88th)	—	8.7.0.0-2.3.0.7	2022-12-12	8.5.0.0-2.1.0.0 → 8.7.0.0-2.3.0.7
CVE-2022-37900US	high7.2	3.23% (88th)	—	8.7.0.0-2.3.0.7	2022-12-12	8.5.0.0-2.1.0.0 → 8.7.0.0-2.3.0.7
CVE-2022-37899US	high7.2	3.23% (88th)	—	8.7.0.0-2.3.0.7	2022-12-12	8.5.0.0-2.1.0.0 → 8.7.0.0-2.3.0.7
CVE-2021-37722US	high7.2	3.06% (88th)	—	2.2.0.4	2021-09-07	2.2.0.0 → 2.2.0.4
CVE-2021-37721US	high7.2	3.06% (88th)	—	2.2.0.4	2021-09-07	2.2.0.0 → 2.2.0.4
CVE-2021-37720US	high7.2	3.06% (88th)	—	2.2.0.4	2021-09-07	2.2.0.0 → 2.2.0.4
CVE-2021-37718US	high7.2	3.06% (88th)	—	2.2.0.6	2021-09-07	2.2.0.0 → 2.2.0.6
CVE-2021-37717US	high7.2	3.06% (88th)	—	2.2.0.6	2021-09-07	2.2.0.0 → 2.2.0.6
CVE-2021-37719US	high7.2	2.90% (87th)	—	2.2.0.4	2021-09-07	2.2.0.0 → 2.2.0.4
CVE-2021-37716US	critical9.8	2.41% (84th)	—	2.2.0.4	2021-09-07	2.2.0.0 → 2.2.0.4
CVE-2020-24634US	critical9.8	2.08% (81st)	—	2.2.0.1	2020-12-11	2 versions
CVE-2022-37897US	critical9.8	1.79% (78th)	—	8.7.0.0-2.3.0.7	2022-12-12	8.5.0.0-2.1.0.0 → 8.7.0.0-2.3.0.7
CVE-2022-37902US	high7.2	1.76% (78th)	—	8.7.0.0-2.3.0.7	2022-12-12	8.5.0.0-2.1.0.0 → 8.7.0.0-2.3.0.7
CVE-2023-22750US	critical9.8	1.74% (78th)	—	no fix	2023-03-01	8.7.0.0-2.3.0.0 → 8.7.0.0-2.3.0.8
CVE-2023-22749US	critical9.8	1.74% (78th)	—	no fix	2023-03-01	8.7.0.0-2.3.0.0 → 8.7.0.0-2.3.0.8
CVE-2023-22748US	critical9.8	1.74% (78th)	—	no fix	2023-03-01	8.7.0.0-2.3.0.0 → 8.7.0.0-2.3.0.8
CVE-2023-22747US	critical9.8	1.74% (78th)	—	no fix	2023-03-01	8.7.0.0-2.3.0.0 → 8.7.0.0-2.3.0.8
CVE-2022-37912US	high8.8	1.65% (76th)	—	8.7.0.0-2.3.0.7	2022-12-12	8.5.0.0-2.1.0.0 → 8.7.0.0-2.3.0.7
CVE-2023-22761US	high7.2	1.62% (76th)	—	no fix	2023-03-01	8.7.0.0-2.3.0.0 → 8.7.0.0-2.3.0.8
CVE-2023-22760US	high7.2	1.62% (76th)	—	no fix	2023-03-01	8.7.0.0-2.3.0.0 → 8.7.0.0-2.3.0.8
CVE-2023-22759US	high7.2	1.62% (76th)	—	no fix	2023-03-01	8.7.0.0-2.3.0.0 → 8.7.0.0-2.3.0.8
CVE-2023-22758US	high7.2	1.62% (76th)	—	no fix	2023-03-01	8.7.0.0-2.3.0.0 → 8.7.0.0-2.3.0.8
CVE-2020-24637US	high7.2OT elevated	1.57% (75th)	—	2.2.0.1	2020-12-11	2 versions
CVE-2022-37898US	high7.2	1.49% (74th)	—	8.7.0.0-2.3.0.7	2022-12-12	8.5.0.0-2.1.0.0 → 8.7.0.0-2.3.0.7
CVE-2023-22770US	high7.2	1.48% (74th)	—	no fix	2023-03-01	8.7.0.0-2.3.0.0 → 8.7.0.0-2.3.0.8
CVE-2023-22769US	high7.2	1.48% (74th)	—	no fix	2023-03-01	8.7.0.0-2.3.0.0 → 8.7.0.0-2.3.0.8
CVE-2023-22768US	high7.2	1.48% (74th)	—	no fix	2023-03-01	8.7.0.0-2.3.0.0 → 8.7.0.0-2.3.0.8
CVE-2023-22767US	high7.2	1.48% (74th)	—	no fix	2023-03-01	8.7.0.0-2.3.0.0 → 8.7.0.0-2.3.0.8
CVE-2023-22766US	high7.2	1.48% (74th)	—	no fix	2023-03-01	8.7.0.0-2.3.0.0 → 8.7.0.0-2.3.0.8
CVE-2023-22765US	high7.2	1.48% (74th)	—	no fix	2023-03-01	8.7.0.0-2.3.0.0 → 8.7.0.0-2.3.0.8
CVE-2023-22764US	high7.2	1.48% (74th)	—	no fix	2023-03-01	8.7.0.0-2.3.0.0 → 8.7.0.0-2.3.0.8
CVE-2023-22763US	high7.2	1.48% (74th)	—	no fix	2023-03-01	8.7.0.0-2.3.0.0 → 8.7.0.0-2.3.0.8
CVE-2023-22762US	high7.2	1.48% (74th)	—	no fix	2023-03-01	8.7.0.0-2.3.0.0 → 8.7.0.0-2.3.0.8
CVE-2023-22752US	critical9.8	1.30% (70th)	—	no fix	2023-03-01	8.7.0.0-2.3.0.0 → 8.7.0.0-2.3.0.8
CVE-2023-22751US	critical9.8	1.30% (70th)	—	no fix	2023-03-01	8.7.0.0-2.3.0.0 → 8.7.0.0-2.3.0.8
CVE-2026-44871US	high8.8	1.23% (69th)	—	no fix	2026-05-12	2 versions
CVE-2021-37733US	medium4.9	1.15% (67th)	—	2.2.0.4	2021-09-07	2.2.0.0 → 2.2.0.4
CVE-2023-22757US	critical9.8	1.07% (65th)	—	no fix	2023-03-01	8.7.0.0-2.3.0.0 → 8.7.0.0-2.3.0.8
CVE-2023-22756US	critical9.8	1.07% (65th)	—	no fix	2023-03-01	8.7.0.0-2.3.0.0 → 8.7.0.0-2.3.0.8
CVE-2023-22755US	critical9.8	1.07% (65th)	—	no fix	2023-03-01	8.7.0.0-2.3.0.0 → 8.7.0.0-2.3.0.8
CVE-2023-22754US	critical9.8	1.07% (65th)	—	no fix	2023-03-01	8.7.0.0-2.3.0.0 → 8.7.0.0-2.3.0.8
CVE-2023-22753US	critical9.8	1.07% (65th)	—	no fix	2023-03-01	8.7.0.0-2.3.0.0 → 8.7.0.0-2.3.0.8
CVE-2026-44854US	—	1.01% (63rd)	—	no fix	2026-05-12	2 versions
CVE-2026-44853US	—	1.01% (63rd)	—	no fix	2026-05-12	2 versions
CVE-2021-37729US	medium6.5	0.99% (62nd)	—	2.2.0.4	2021-09-07	2 versions
CVE-2026-44865US	—	0.92% (60th)	—	no fix	2026-05-12	2 versions
CVE-2026-44870US	high8.8	0.90% (59th)	—	no fix	2026-05-12	2 versions
CVE-2026-44869US	high8.8	0.90% (59th)	—	no fix	2026-05-12	2 versions

showing 50 of 89

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')34 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')19 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')10 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')8 CVEs
CWE-121Stack-based Buffer Overflow6 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer5 CVEs
CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')5 CVEs
CWE-787Out-of-bounds Write3 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE89 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan