SD
Product
Sd-wan
103
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 19High 65Medium 18Low 1
Watch
Add Sd-wan to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-44856 | 7.2 | May 12 | Authenticated Stack-Based Buffer Overflow in PAPI Services Affected: 8.6.0.4-2.2.0.0 through 8.6.0.4-2.2.0.7; 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.9 |
| CVE-2026-44855 | 7.2 | May 12 | Authenticated Stack-Based Buffer Overflow in PAPI Services Affected: 8.6.0.4-2.2.0.0 through 8.6.0.4-2.2.0.7; 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.9 |
| CVE-2026-44854 | 7.2 | May 12 | Authenticated Remote Code Execution via Arbitrary File Write in AOS-8 and AOS-10 Web-Based Management Interface Affected: 8.6.0.4-2.2.0.0 through 8.6.0.4-2.2.0.7; 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.9 |
| CVE-2026-44853 | 7.2 | May 12 | Authenticated Remote Code Execution via Arbitrary File Write in AOS-8 and AOS-10 Web-Based Management Interface Affected: 8.6.0.4-2.2.0.0 through 8.6.0.4-2.2.0.7; 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.9 |
| CVE-2026-44852 | 7.2 | May 12 | Authenticated Remote Code Execution via Arbitrary File Overwrite in the AOS-8 and AOS-10 Web-Based Management Interface Affected: 8.6.0.4-2.2.0.0 through 8.6.0.4-2.2.0.7; 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.9 |
| CVE-2024-25613 | 7.2 | Mar 5 | Authenticated command injection vulnerabilities exist in the ArubaOS command line interface Affected: 8.7.0.0 before 8.8.0.0; 8.6.0.4 before 8.7.0.0 |
| CVE-2024-25612 | 7.2 | Mar 5 | Authenticated command injection vulnerabilities exist in the ArubaOS command line interface Affected: 8.7.0.0 before 8.8.0.0; 8.6.0.4 before 8.7.0.0 |
| CVE-2024-25611 | 7.2 | Mar 5 | Authenticated command injection vulnerabilities exist in the ArubaOS command line interface Affected: 8.7.0.0 before 8.8.0.0; 8.6.0.4 before 8.7.0.0 |
| CVE-2024-1356 | 7.2 | Mar 5 | Authenticated command injection vulnerabilities exist in the ArubaOS command line interface Affected: 8.7.0.0 before 8.8.0.0; 8.6.0.4 before 8.7.0.0 |
| CVE-2023-22770 | 7.2 | Feb 28 | Authenticated Remote Command Execution in the ArubaOS Command Line Interface Affected: 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.8 |
| CVE-2023-22769 | 7.2 | Feb 28 | Authenticated Remote Command Execution in the ArubaOS Command Line Interface Affected: 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.8 |
| CVE-2023-22768 | 7.2 | Feb 28 | Authenticated Remote Command Execution in the ArubaOS Command Line Interface Affected: 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.8 |
| CVE-2023-22767 | 7.2 | Feb 28 | Authenticated Remote Command Execution in the ArubaOS Command Line Interface Affected: 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.8 |
| CVE-2023-22766 | 7.2 | Feb 28 | Authenticated Remote Command Execution in the ArubaOS Command Line Interface Affected: 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.8 |
| CVE-2023-22765 | 7.2 | Feb 28 | Authenticated Remote Command Execution in the ArubaOS Command Line Interface Affected: 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.8 |
| CVE-2023-22764 | 7.2 | Feb 28 | Authenticated Remote Command Execution in the ArubaOS Command Line Interface Affected: 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.8 |
| CVE-2023-22763 | 7.2 | Feb 28 | Authenticated Remote Command Execution in the ArubaOS Command Line Interface Affected: 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.8 |
| CVE-2023-22762 | 7.2 | Feb 28 | Authenticated Remote Command Execution in the ArubaOS Command Line Interface Affected: 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.8 |
| CVE-2023-22761 | 7.2 | Feb 28 | Authenticated Remote Command Execution in ArubaOS Web-based Management Interface Affected: 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.8 |
| CVE-2023-22760 | 7.2 | Feb 28 | Authenticated Remote Command Execution in ArubaOS Web-based Management Interface Affected: 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.8 |
| CVE-2023-22759 | 7.2 | Feb 28 | Authenticated Remote Command Execution in ArubaOS Web-based Management Interface Affected: 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.8 |
| CVE-2023-22758 | 7.2 | Feb 28 | Authenticated Remote Command Execution in ArubaOS Web-based Management Interface Affected: 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.8 |
| CVE-2022-37902 | 7.2 | Nov 3 | Authenticated command injection vulnerabilities exist in the ArubaOS command line interface Affected: 8.5.0.0-2.1.0.0 before 8.7.0.0-2.3.0.7 |
| CVE-2022-37901 | 7.2 | Nov 3 | Authenticated command injection vulnerabilities exist in the ArubaOS command line interface Affected: 8.5.0.0-2.1.0.0 before 8.7.0.0-2.3.0.7 |
| CVE-2022-37900 | 7.2 | Nov 3 | Authenticated command injection vulnerabilities exist in the ArubaOS command line interface Affected: 8.5.0.0-2.1.0.0 before 8.7.0.0-2.3.0.7 |
| CVE-2022-37899 | 7.2 | Nov 3 | Authenticated command injection vulnerabilities exist in the ArubaOS command line interface Affected: 8.5.0.0-2.1.0.0 before 8.7.0.0-2.3.0.7 |
| CVE-2022-37898 | 7.2 | Nov 3 | Authenticated command injection vulnerabilities exist in the ArubaOS command line interface Affected: 8.5.0.0-2.1.0.0 before 8.7.0.0-2.3.0.7 |
| CVE-2021-37722 | 7.2 | Sep 7 | A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0.4;… Affected: 2.2.0.0 before 2.2.0.4 |
| CVE-2021-37721 | 7.2 | Sep 7 | A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0.4;… Affected: 2.2.0.0 before 2.2.0.4 |
| CVE-2021-37720 | 7.2 | Sep 7 | A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0.4;… Affected: 2.2.0.0 before 2.2.0.4 |
| CVE-2021-37719 | 7.2 | Sep 7 | A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0.4;… Affected: 2.2.0.0 before 2.2.0.4 |
| CVE-2021-37718 | 7.2 | Sep 7 | A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0.6;… Affected: 2.2.0.0 before 2.2.0.6 |
| CVE-2021-37717 | 7.2 | Sep 7 | A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0.6;… Affected: 2.2.0.0 before 2.2.0.6 |
| CVE-2020-24637 | 7.2 | Dec 11 | Two vulnerabilities in ArubaOS GRUB2 implementation allows for an attacker to bypass secureboot Affected: before 2.1.0.2; 2.2.0.0 before 2.2.0.1 |
| CVE-2023-22777 | 6.5 | Feb 28 | Authenticated Information Disclosure in ArubaOS Web-based Management Interface Affected: 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.8 |
| CVE-2023-22775 | 6.5 | Feb 28 | Authenticated Sensitive Information Disclosure in ArubaOS Command Line Interface Affected: 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.8 |
| CVE-2023-22774 | 6.5 | Feb 28 | Authenticated Path Traversal in ArubaOS Command Line Interface Allows for Arbitrary File Deletion. Affected: 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.8 |
| CVE-2023-22773 | 6.5 | Feb 28 | Authenticated Path Traversal in ArubaOS Command Line Interface Allows for Arbitrary File Deletion. Affected: 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.8 |
| CVE-2023-22772 | 6.5 | Feb 28 | Authenticated Path Traversal in ArubaOS Web-based Management Interface Allows for Arbitrary File Deletion Affected: 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.8 |
| CVE-2022-37910 | 6.5 | Nov 3 | A buffer overflow vulnerability exists in the ArubaOS command line interface Affected: 8.5.0.0-2.1.0.0 before 8.7.0.0-2.3.0.7 |
| CVE-2022-37908 | 6.5 | Nov 3 | An authenticated attacker can impact the integrity of the ArubaOS bootloader on 7xxx series controllers Affected: 8.5.0.0-2.1.0.0 before 8.7.0.0-2.3.0.7 |
| CVE-2021-37729 | 6.5 | Sep 7 | A remote path traversal vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.0-2.2.0.4; Prior to 8.7.1.3,… Affected: 2.2.0.0 before 2.2.0.4 |
| CVE-2021-37731 | 6.2 | Sep 7 | A local path traversal vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.0-2.2.0.4; Prior to 8.7.1.1,… Affected: 2.2.0.0 before 2.2.0.4 |
| CVE-2024-33513 | 5.9 | May 1 | Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the AP Management service accessed via the PAPI protocol Affected: 8.7.0.0; 8.6.0.4 |
| CVE-2022-37911 | 5.5 | Nov 3 | Due to improper restrictions on XML entities multiple vulnerabilities exist in the command line interface of ArubaOS Affected: 8.5.0.0-2.1.0.0 before 8.7.0.0-2.3.0.7 |
| CVE-2026-44873 | 5.4 | May 12 | Insufficient Session Invalidation on User Account Deactivation in AOS-8 Operating System Affected: 8.6.0.4-2.2.0.0 through 8.6.0.4-2.2.0.7; 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.9 |
| CVE-2024-33518 | 5.3 | May 1 | An unauthenticated Denial-of-Service (DoS) vulnerability exists in the Radio Frequency Manager service accessed via the PAPI protocol Affected: 8.7.0.0; 8.6.0.4 |
| CVE-2024-25615 | 5.3 | Mar 5 | An unauthenticated Denial-of-Service (DoS) vulnerability exists in the Spectrum service accessed via the PAPI protocol in ArubaOS 8.x Affected: 8.7.0.0 before 8.8.0.0; 8.6.0.4 before 8.7.0.0 |
| CVE-2022-37909 | 5.3 | Nov 3 | Aruba has identified certain configurations of ArubaOS that can lead to sensitive information disclosure from the configured ESSIDs Affected: 8.5.0.0-2.1.0.0 before 8.7.0.0-2.3.0.7 |
| CVE-2023-22776 | 4.9 | Feb 28 | Authenticated Remote Path Traversal in ArubaOS Command Line Interface Allows for Arbitrary File Read Affected: 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.8 |