HIGH CERTFR-2026-AVI-1369

Multiple vulnerabilities in HPE Aruba Networking products

Published 23/10/2026 Source : CERT-FR

Description

Multiple vulnerabilities have been discovered in HPE Aruba Networking products. Some of them allow an attacker to achieve remote arbitrary code execution, privilege escalation and remote denial of service.

Impacts

Remote denial of service
Remote cross-site scripting (XSS)
Remote arbitrary code execution
Data integrity compromise
SQL injection (SQLi)
Server-side request forgery (SSRF)
Security policy bypass
Data confidentiality compromise
Privilege escalation

Solutions

Refer to the vendor's security bulletin to obtain the patches (see the Documentation section).

Affected Products (2)

HPE Aruba Networking · AOS

Affected versions : AOS versions 8.10.x.x et antérieures à 8.10.0.24
AOS versions 10.4.x.x et antérieures à 10.4.1.14
AOS versions 8.13.x.x et antérieures à 8.13.3.1
AOS versions 10.8.x.x et antérieures à 10.8.1.2
AOS versions 10.7.x.x et antérieures à 10.7.2.7

HPE Aruba Networking · ClearPass Policy Manager

Affected versions : ClearPass Policy Manager versions 6.14.x et antérieurs à 6.14.1
ClearPass Policy Manager versions 6.11.x et antérieurs à 6.11.16

Vulnerabilities (CVE) (74)

CVE-2026-109618 CVE-2026-109619 CVE-2026-79844 CVE-2026-79845 CVE-2026-79846 CVE-2026-79847 CVE-2026-79848 CVE-2026-79849 CVE-2026-79850 CVE-2026-79851 CVE-2026-79852 CVE-2026-79853 CVE-2026-79854 CVE-2026-79855 CVE-2026-79856 CVE-2026-79857 CVE-2026-79858 CVE-2026-79859 CVE-2026-79860 CVE-2026-79861 CVE-2026-79862 CVE-2026-79863 CVE-2026-79864 CVE-2026-79865 CVE-2026-79866 CVE-2026-79867 CVE-2026-79868 CVE-2026-79869 CVE-2026-79870 CVE-2026-79871 CVE-2026-79872 CVE-2026-79873 CVE-2026-79874 CVE-2026-79875 CVE-2026-79876 CVE-2026-79877 CVE-2026-79878 CVE-2026-79879 CVE-2026-79880 CVE-2026-79881 CVE-2026-79882 CVE-2026-79883 CVE-2026-79884 CVE-2026-79885 CVE-2026-79886 CVE-2026-79887 CVE-2026-79888 CVE-2026-79889 CVE-2026-79890 CVE-2026-79891 CVE-2026-79892 CVE-2026-79893 CVE-2026-79894 CVE-2026-79895 CVE-2026-79955 CVE-2026-79956 CVE-2026-95704 CVE-2026-95705 CVE-2026-95706 CVE-2026-95707 CVE-2026-95708 CVE-2026-95709 CVE-2026-95710 CVE-2026-95711 CVE-2026-95712 CVE-2026-95713 CVE-2026-95714 CVE-2026-95715 CVE-2026-95716 CVE-2026-95717 CVE-2026-95718 CVE-2026-95719 CVE-2026-95720 CVE-2026-95721

Related Advisories

Other advisories sharing at least one CVE.

Multiple vulnerabilities in PHP

CERTFR-2026-AVI-1359 · 21/10/2026 · 2 shared CVE(s)

HIGH

Information

Severity: HIGH
Risk Indicators: ? Exploit in Wild ? PoC Public ✗ CISA KEV ✓ Patch Available ? Workaround
Source: CERT-FR CERTFR-2026-AVI-1369
External Link: View Source ↗
Published: 23/10/2026
Officially Updated: 23/10/2026
Added to OpenVOC: 23/10/2026 18:00
Last updated: 25/10/2026 19:00