VDB

GCVE-110-NCSC-2026-454

GCVE-110-NCSC-2026-454
Advisory PublishedCVSS 3.3/10
Vulnetix · Advisory published October 26, 2026
Authentication bypass vulnerabilities in AOS-10 may allow unauthenticated remote attackers to execute arbitrary commands on the underlying operating system under certain external conditions.

Weaknesses (CWE)

CWE-288Authentication Bypass Using an Alternate Path or ChannelCWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')CWE-306Missing Authentication for Critical FunctionCWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')CWE-266Incorrect Privilege Assignment

Risk Scores

CVSS 3.1
3.3/10
Low · CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:L

Affected Products

VendorProductVersionsPlatforms
Hewlett Packard Enterprise (HPE)vers:unknown/*——
Aruba Networksvers:unknown/*——
Hewlett Packard Enterprisevers:unknown/*——
Arubavers:unknown/*——

References

advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory

Browse GCVE Records

854 records in the GCVE database · Updated October 30, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 50/day Open console ›