Aruba ArubaOS

Name: Aruba ArubaOS
Brand: Aruba

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

4critical19high5medium2low

updated 2026-10-27

vulnerabilities (213)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2024-26304US	—	44.0% (99th)	Exploit	no fix	2024-05-01	4 versions
CVE-2024-26305US	critical9.8	15.2% (97th)	—	no fix	2024-05-01	4 versions
CVE-2024-33512US	—	14.6% (97th)	—	no fix	2024-05-01	4 versions
CVE-2024-33511US	—	14.6% (97th)	—	no fix	2024-05-01	4 versions
CVE-2024-42509US	—	1.97% (80th)	—	no fix	2024-11-05	3 versions
CVE-2024-42502US	—	1.79% (78th)	—	10.6.0.3	2024-09-17	4 versions
CVE-2024-47461US	—	1.74% (78th)	—	no fix	2024-11-05	3 versions
CVE-2026-73767US	—	1.66% (77th)	—	no fix	2026-09-01	5 versions
CVE-2026-95715US	—	1.59% (75th)	—	no fix	2026-10-22	≤ vers:unknown/*
CVE-2026-79861US	—	1.56% (75th)	—	no fix	2026-10-22	≤ vers:unknown/*
CVE-2024-42503US	—	1.50% (74th)	—	10.6.0.3	2024-09-17	4 versions
CVE-2024-42505US	—	1.49% (74th)	—	10.4.1.4	2024-09-25	3 versions
CVE-2026-73766US	—	1.45% (73rd)	—	no fix	2026-09-01	5 versions
CVE-2025-37176US	high7.2	1.43% (73rd)	—	8.10.0.21	2026-01-13	4 versions
CVE-2024-42507US	—	1.42% (73rd)	—	10.6.0.3	2024-09-25	3 versions
CVE-2024-42506US	—	1.42% (73rd)	—	10.4.1.4	2024-09-25	3 versions
CVE-2026-79857US	—	1.42% (73rd)	—	no fix	2026-10-22	≤ vers:unknown/*
CVE-2024-47460US	—	1.39% (72nd)	—	no fix	2024-11-05	3 versions
CVE-2025-37171US	—	1.38% (72nd)	—	8.10.0.21	2026-01-13	4 versions
CVE-2026-79846US	—	1.37% (72nd)	—	no fix	2026-10-22	≤ vers:unknown/*
CVE-2025-37170US	—	1.29% (70th)	—	10.7.2.2	2026-01-13	4 versions
CVE-2026-95709US	—	1.26% (70th)	—	no fix	2026-10-22	≤ vers:unknown/*
CVE-2026-95708US	—	1.26% (70th)	—	no fix	2026-10-22	≤ vers:unknown/*
CVE-2025-37172US	—	1.26% (69th)	—	8.13.1.1	2026-01-13	4 versions
CVE-2026-44871US	high8.8	1.23% (69th)	—	8.12.0.7	2026-05-12	6 versions
CVE-2025-37134US	—	1.23% (69th)	—	no fix	2025-10-14	5 versions
CVE-2025-37133US	—	1.23% (69th)	—	no fix	2025-10-14	5 versions
CVE-2025-23052US	—	1.22% (68th)	—	8.10.0.15	2025-01-14	4 versions
CVE-2025-37138US	—	1.21% (68th)	—	no fix	2025-10-14	5 versions
CVE-2025-27083US	—	1.17% (67th)	—	8.12.0.4	2025-04-08	6 versions
CVE-2024-42501US	—	1.17% (67th)	—	10.6.0.3	2024-09-17	4 versions
CVE-2026-79864US	—	1.16% (67th)	—	no fix	2026-10-22	≤ vers:unknown/*
CVE-2024-47463US	—	1.15% (67th)	—	no fix	2024-11-05	3 versions
CVE-2024-47462US	—	1.15% (67th)	—	no fix	2024-11-05	3 versions
CVE-2026-95706US	—	1.15% (67th)	—	no fix	2026-10-22	≤ vers:unknown/*
CVE-2026-95705US	—	1.15% (67th)	—	no fix	2026-10-22	≤ vers:unknown/*
CVE-2026-44854US	—	1.01% (63rd)	—	10.7.2.3	2026-05-12	6 versions
CVE-2026-44853US	—	1.01% (63rd)	—	8.13.1.2	2026-05-12	6 versions
CVE-2026-79890US	—	0.96% (61st)	—	no fix	2026-10-22	≤ vers:unknown/*
CVE-2026-23823US	—	0.96% (61st)	—	no fix	2026-05-12	6 versions
CVE-2026-44865US	—	0.92% (60th)	—	10.4.1.11	2026-05-12	6 versions
CVE-2026-44870US	high8.8	0.90% (59th)	—	8.12.0.7	2026-05-12	6 versions
CVE-2026-44869US	high8.8	0.90% (59th)	—	8.13.1.2	2026-05-12	6 versions
CVE-2026-44868US	high8.8	0.90% (59th)	—	8.12.0.7	2026-05-12	6 versions
CVE-2026-44867US	high8.8	0.90% (59th)	—	10.7.2.3	2026-05-12	6 versions
CVE-2026-44866US	high8.8	0.90% (59th)	—	8.13.1.2	2026-05-12	6 versions
CVE-2025-37146US	—	0.89% (59th)	—	no fix	2025-10-14	5 versions
CVE-2024-47464US	—	0.87% (59th)	—	no fix	2024-11-05	3 versions
CVE-2026-73765US	—	0.87% (59th)	—	no fix	2026-09-01	5 versions
CVE-2026-79878US	—	0.82% (57th)	—	no fix	2026-10-22	≤ vers:unknown/*

showing 50 of 213

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')35 CVEs
CWE-121Stack-based Buffer Overflow18 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer16 CVEs
CWE-284Improper Access Control12 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')11 CVEs
CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')10 CVEs
CWE-400Uncontrolled Resource Consumption9 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')8 CVEs

sources (2)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)141 CVEs
NLNCSC-NL (CSAF)72 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan