{"id":"CVE-2026-95705","kind":"vulnerability","aliases":["CVE-2026-95705"],"related":[],"title":"Aruba AOS-8: authenticated attacker runs commands via command injection","description":"Command injection vulnerabilities in the affected interface of AOS-8 could allow an authenticated remote attacker with high privileges to perform command injection. Successful exploitation could allow an attacker to execute commands with the privileges of the impacted mechanism on the underlying operating system.","summary":"Command injection flaws in an AOS-8 interface let an authenticated remote attacker with high privileges run commands. Successful exploitation runs commands on the underlying operating system with the privileges of the affected mechanism.","severity":"high","cvss":7.2,"epss":0.00342,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["aruba-aos-8","infrastructure","network-appliance"],"not_affected_if":[],"how_to_check":"- unknown","fix":"- unknown","status":"open","published_at":"2026-10-22T19:18:06+00:00","first_seen_at":"2026-10-23T21:57:32+00:00","triaged_at":"2026-10-25T03:27:49+00:00","updated_at":"2026-10-25T03:27:49+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-10-25T03:27:49Z","model":"claude-haiku-5-5","output":{"fix":"- unknown","reach":"network","title":"Aruba AOS-8: authenticated attacker runs commands via command injection","impact":"high","summary":"Command injection flaws in an AOS-8 interface let an authenticated remote attacker with high privileges run commands. Successful exploitation runs commands on the underlying operating system with the privileges of the affected mechanism.","category":"infrastructure","nicknames":[],"who_cares":["aruba-aos-8","network-appliance"],"confidence":0.5,"needs_auth":"yes","worst_case":"Commands run on the appliance operating system with the affected mechanism's privileges","analyst_note":"Find the vendor advisory and the list of affected AOS-8 versions and fixed builds; check NVD link https://nvd.nist.gov/vuln/detail/CVE-2026-95705.","how_to_check":"- unknown","needs_analyst":true,"not_affected_if":[],"who_is_affected":"Teams running Aruba AOS-8 controllers or gateways with administrative accounts exposed to the network. The sources do not list affected AOS-8 versions or the specific interface, so unknown whether a given build is vulnerable.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000555,"input_tokens":3348,"output_tokens":440,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-2026':12A,15A '-8':3A,31B,68C '-95705':13A,16A '8':20B 'affect':57B,64C 'allow':70C,85C 'ao':2A,19B,30B,67C 'applianc':24B 'aruba':1A,18B 'aruba-ao':17B 'attack':5A,37B,74C,87C 'authent':4A,35B,72C 'command':7A,9A,25B,42B,46B,59C,80C,90C 'could':69C,84C 'cve':11A,14A 'execut':89C 'exploit':44B,83C 'flaw':27B 'high':39B,76C 'impact':96C 'infrastructur':21B 'inject':10A,26B,60C,81C 'interfac':32B,65C 'let':33B 'mechan':58B,97C 'network':23B 'network-appli':22B 'oper':50B,101C 'perform':79C 'privileg':40B,54B,77C,93C 'remot':36B,73C 'run':6A,41B,45B 'success':43B,82C 'system':51B,102C 'under':49B,100C 'via':8A 'vulner':61C","nicknames":[],"mitigations":[],"who_affected":"Teams running Aruba AOS-8 controllers or gateways with administrative accounts exposed to the network. The sources do not list affected AOS-8 versions or the specific interface, so unknown whether a given build is vulnerable.","tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-22T19:18:06+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss_by":"security-alert@hpe.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-95705","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-95705","severity":null,"published_at":"2026-10-22T19:18:06+00:00","modified_at":"2026-10-23T20:17:29+00:00","first_seen_at":"2026-10-23T21:57:32+00:00","fetched_at":"2026-10-23T22:29:03+00:00","note":null},{"source":"epss","external_id":"CVE-2026-95705","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-95705","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-24T07:15:51+00:00","fetched_at":"2026-10-24T07:15:51+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}