CVE-2026-95711: Authentication Bypass Leading to Remote Code Execution in AOS-10 Web-Based Management Interface

Published Oct 22, 2026

Updated

No description provided

Affected Software

1 affected component

HPE Aruba Networking ArubaOS 10

Event History

Oct 22, 2026

CVE Published

via MITRE·07:07 PM

Data Sourced

via MITRE·07:07 PM

DescriptionSeverity

Frequently Asked Questions

Does an attacker need an existing account or administrative privileges?

No. The CVSS vector indicates that no privileges are required before exploitation.

What access does an attacker need to attempt exploitation?

The attack vector is adjacent network (AV:A), so the attacker must be on an adjacent network rather than attacking solely from an arbitrary remote Internet location. Exploitation also requires user interaction (UI:R).

What is the potential security impact?

The CVSS vector rates confidentiality, integrity, and availability impacts as high. Successful exploitation could therefore expose data, permit modification, and disrupt service.

CVE-2026-95711: Authentication Bypass Leading to Remote Code Execution in AOS-10 Web-Based Management Interface

Affected Software

Event History

Frequently Asked Questions

Does an attacker need an existing account or administrative privileges?

What access does an attacker need to attempt exploitation?

What is the potential security impact?

Company

Resources

Contact

Frequently Asked Questions

Does an attacker need an existing account or administrative privileges?

What access does an attacker need to attempt exploitation?

What is the potential security impact?