---
id: "CVE-2026-95704"
kind: "vulnerability"
aliases: ["CVE-2026-95704"]
title: "Wireless network management web interface flaw allows remote code execution"
severity: "high"
cvss: 7.2
epss: 0.00342
exploited: false
status: "open"
category: "infrastructure"
products: [{"name": "AOS-10", "fixed": ["10.8.1.2", "10.7.2.7", "10.4.1.14"], "affected": "<= 10.8.1.1 (10.8.x); <= 10.7.2.6 (10.7.x); <= 10.4.1.13 (10.4.x)", "ecosystem": "vendor"}, {"name": "AOS-8", "fixed": ["8.13.3.1", "8.10.0.24"], "affected": "<= 8.13.3.0 (8.13.x); <= 8.10.0.23 (8.10.x)", "ecosystem": "vendor"}]
ecosystems: []
tags: ["aos-10", "aos-8", "aruba", "hpe", "infrastructure", "network-management", "rce", "web-ui", "wireless"]
not_affected_if: ["no-hpe-aos-wireless", "no-wireless-management-system", "patched-version"]
published_at: "2026-10-22T19:18:06+00:00"
first_seen_at: "2026-10-23T21:57:32+00:00"
updated_at: "2026-10-25T03:29:14+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-95704", "first_seen_at": "2026-10-23T21:57:32+00:00"}, {"source": "epss", "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-95704", "first_seen_at": "2026-10-24T07:15:51+00:00"}, {"source": "analyst", "url": null, "first_seen_at": "2026-10-25T03:29:14+00:00"}]
---

# Wireless network management web interface flaw allows remote code execution

Authenticated (admin-level) remote code execution in the web-based management interface of HPE Networking (Aruba) AOS-8 and AOS-10 wireless OS, patched in bulletin HPESBNW05162. CVSS 7.2, PR:H. HPE reports no public exploit code. The same bulletin fixes several unauthenticated 10.0 flaws, so patch the whole set.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:AOS-10 affected <= 10.8.1.1 (10.8.x); <= 10.7.2.6 (10.7.x); <= 10.4.1.13 (10.4.x) fixed 10.8.1.2, 10.7.2.7, 10.4.1.14
- vendor:AOS-8 affected <= 8.13.3.0 (8.13.x); <= 8.10.0.23 (8.10.x) fixed 8.13.3.1, 8.10.0.24

## How to check

Check the running AOS version on each Mobility Conductor, Controller, Gateway, AOS-10 AP and AOS-8 Instant AP. You are affected at or below: 10.8.1.1, 10.7.2.6, 10.4.1.13, 8.13.3.0, 8.10.0.23. Also check whether the CLI/web management interface is reachable from non-management networks.

## Fix

Upgrade to AOS 10.8.1.2, 10.7.2.7, 10.4.1.14, 8.13.3.1 or 8.10.0.24 or later (download from networkingsupport.hpe.com). Until then, restrict the CLI and web management interfaces to a dedicated layer-2 segment/VLAN and/or firewall policy, as HPE advises. End-of-maintenance releases are presumed affected; move to a supported release.

## Timeline

- 2026-10-23T21:57:32+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-95704
- 2026-10-24T07:15:51+00:00 epss https://api.first.org/data/v1/epss?cve=CVE-2026-95704
- 2026-10-25T03:29:14+00:00 analyst — HPE AOS-8/AOS-10 (Aruba) bug, bulletin HPESBNW05162 (22 Oct 2026); versions/fix/workaround read in HPE's own CSAF text. The per-CVE entry for 95704 was cut off in the fetch, so the bulletin-wide ranges are used; they match the CVE record's ranges. No exploitation or PoC per HPE; CISA SSVC says none.

## Documents

- [advisory] HPESBNW05162 HPE Networking AOS-8 and AOS-10 advisory https://csaf.arubanetworking.hpe.com/2026/hpe_networking_-_hpesbnw05162.txt
- [describes] CVE Record: CVE-2026-95704 (HPE CNA) https://www.cve.org/CVERecord?id=CVE-2026-95704

## From the sources

A vulnerability in the web-based management interface of wireless network management systems could allow an authenticated remote attacker to execute remote code. Successful exploitation could enable an attacker to execute arbitrary commands on the underlying operating system, potentially compromising system integrity and data security.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_