---
id: "CVE-2026-95711"
kind: "vulnerability"
aliases: ["CVE-2026-95711"]
title: "AOS-10 web management interface lets unauthenticated adjacent attacker run host commands"
severity: "high"
cvss: 7.1
epss: 0.00155
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["aos-10", "infrastructure", "network-gear", "web-management"]
not_affected_if: ["management-isolated", "no-aos-10"]
published_at: "2026-10-22T19:18:06+00:00"
first_seen_at: "2026-10-23T21:57:32+00:00"
updated_at: "2026-10-25T03:31:25+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-95711", "first_seen_at": "2026-10-23T21:57:32+00:00"}, {"source": "epss", "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-95711", "first_seen_at": "2026-10-24T07:15:51+00:00"}]
---

# AOS-10 web management interface lets unauthenticated adjacent attacker run host commands

The web-based management interface of AOS-10 has an authentication bypass. An unauthenticated attacker on an adjacent network can get past login and run arbitrary commands on the underlying operating system, if preconditions outside the attacker's control are met.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Identify AOS-10 devices in the estate and their firmware version; the sources do not list affected versions, so check the vendor advisory.
- Confirm whether the web management interface is reachable from adjacent or untrusted networks.

## Fix

- Unknown: the sources do not name a fixed AOS-10 version. Check the vendor (Aruba/HPE) advisory for the patched release and apply it.
- Restrict access to the web management interface to trusted management networks until patched.

## Timeline

- 2026-10-23T21:57:32+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-95711
- 2026-10-24T07:15:51+00:00 epss https://api.first.org/data/v1/epss?cve=CVE-2026-95711

## From the sources

An authentication bypass vulnerability in the web-based management interface of AOS-10 could allow an unauthenticated adjacent attacker to circumvent existing authentication controls and run arbitrary commands on the underlying host if certain preconditions outside of the attacker's control are met. Successful exploitation of this vulnerability could allow an attacker to execute arbitrary commands on the underlying operating system.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_