VDB
CVE-2026-95721
CVE-2026-95721
PUBLISHED
CVSS 3.3 LOW
Reported by hpe · Published October 22, 2026
A memory corruption vulnerability exists in the web-based management interface of AOS-8. Successful exploitation could allow an authenticated low privilege attacker with local access to view some system files and interrupt the normal operation of the affected service.
Risk Scores
CVSS 3.1
3.3
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:L
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Hewlett Packard Enterprise (HPE) | ArubaOS (AOS) | 8.13.0.0, 8.10.0.0 |
| Hewlett Packard Enterprise (HPE) | ArubaOS (AOS) | 8.13.0.0, 8.10.0.0 |
| Hewlett Packard Enterprise (HPE) | Unknown product | 8.12.0.0, 8.10.0.0 |
Timeline
- Oct 22, 2026 CVE Published
- Oct 23, 2026 EPSS Score
- Oct 23, 2026 Coalition ESS Score
- Oct 23, 2026 CVE Updated
- Oct 25, 2026 EPSS Score