Critical vulnerabilities
42 critical vulnerabilities in 3 servers and applications
42 vulnerabilities rated critical (CVSS 9.0 or higher) found on 3 November 2026: HPE ArubaOS (32), Linux kernel (8).
- 42 critical
HPE ArubaOS
32 vulnerabilities · Servers and applications
- 10.0Unauthenticated Buffer Overflow Vulnerability leads to Remote Code Execution in AOS-10
- 10.0Authentication Bypass Leading to Remote Code Execution in AOS-8
- 10.0Unauthenticated SQL Injection Vulnerabilities allow Remote Code Execution in AOS-8
- 10.0Unauthenticated SQL Injection Vulnerabilities allow Remote Code Execution in AOS-8
- 10.0Unauthenticated Buffer Overflow Vulnerabilities leads to Remote Code Execution in AOS-10
Show 27 more
- 10.0Unauthenticated Command Injection Vulnerabilities in AOS-8
- 10.0Authentication Bypass Leading to Remote Code Execution in AOS-10
- 9.8Unauthenticated Command Injection Vulnerability in the PAPI Protocol of AOS-10
- 9.8Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-8
- 9.8Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-8
- 9.8Unauthenticated SQL Injection Vulnerability in the PAPI Protocol of AOS-8
- 9.8Unauthenticated Command Injection Vulnerability in AOS-8 PAPI Protocol
- 9.8Unauthenticated Buffer Overflow Vulnerability leads to Authentication Bypass in AOS-8
- 9.8Authentication Bypass in the SSH Daemon of AOS-8 leads to Complete System Compromise
- 9.8Unauthenticated SQL Injection Vulnerability leads to Remote Code Execution in AOS-10
- 9.8Unauthenticated Sensitive Information Disclosure leads to Remote Code Execution in AOS-10
- 9.8Unauthenticated SQL Injection allows Remote Code Execution in AOS Web-Based Management Interface
- 9.6Unauthenticated Sensitive Information Disclosure in the Command Line Interface of AOS-10
- 9.6Authentication Bypass leads to Unauthorized Access in AOS-8
- 9.6Authentication Bypass Leading to Remote Code Execution in AOS-10
- 9.6Authentication Bypass Vulnerabilities lead to Complete System Compromise in AOS-8
- 9.6Authentication Bypass Leading to Remote Code Execution in AOS-8
- 9.6Unauthenticated Adjacent Path Traversal Vulnerability leads to Filesystem Compromise in AOS-8
- 9.6Unauthenticated Adjacent Memory Corruption Vulnerability leads to Remote Code Execution in AOS-10
- 9.6Unauthenticated Adjacent Command Injection Vulnerability in AOS-10
- 9.6Unauthenticated Adjacent Buffer Overflow Vulnerabilities lead to Remote Code Execution
- 9.6Unauthenticated Adjacent Buffer Overflow Vulnerabilities lead to Remote Code Execution
- 9.4Unauthenticated Buffer Overflow Vulnerability allows Remote Code Execution in AOS-10 and AOS-8
- 9.3Unauthenticated Adjacent Sensitive Information Disclosure in AOS-10 Wi-Fi Frame Processing
- 9.3Authentication Bypass in the PAPI Protocol of AOS-8 Allows Unauthorized Administrative Access
- 9.3Authentication Bypass in the API allows Administrative Access of AOS-10
- 9.3Unauthenticated Adjacent Authentication Bypasses in the PAPI Protocol of AOS-10 Leads to Unauthorized Administrative Access
Linux kernel
8 vulnerabilities · Servers and applications · most fixed in 6.6.160, 6.12.112, 6.12.113
- 9.8net/mlx5e: Prevent stale XSK buffer release on refill retry
- 9.8net/mlx5e: Prevent stale XSK buffer release on MPWQE refill retry
- 9.8btrfs: fix xattr replace when multiple xattrs are packed in the same item
- 9.8sctp: discard the rest of the packet on a stale-cookie error
- 9.8net: openvswitch: conntrack: fix helper UAF due to extensions realloc
Servers and applications
2 vulnerabilities
From NVD, the CVE Program, OSV.dev with the GitHub Advisory Database, WPVulnerability, WordPress's security advisories and CISA's Known Exploited Vulnerabilities catalog, as they stood when this was written. Each vulnerability's own page has its latest rating and fix. This product uses the NVD API but is not endorsed or certified by the NVD.