Live › vulnerability › CVE-2026-95705
Go to dashboardCommand injection flaws in an AOS-8 interface let an authenticated remote attacker with high privileges run commands. Successful exploitation runs commands on the underlying operating system with the privileges of the affected mechanism.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Teams running Aruba AOS-8 controllers or gateways with administrative accounts exposed to the network. The sources do not list affected AOS-8 versions or the specific interface, so unknown whether a given build is vulnerable.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Command injection vulnerabilities in the affected interface of AOS-8 could allow an authenticated remote attacker with high privileges to perform command injection. Successful exploitation could allow an attacker to execute commands with the privileges of the impacted mechanism on the underlying operating system.
This page as .md · .json · in your agent: get_signal("CVE-2026-95705")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.