NetSight
high7.2

CVE-2026-23820

A vulnerability in the command line interface of Access Points running AOS-10 and AOS-8 Instant could allow an authenticated remote attacker to execute system …

Impact

A vulnerability in the command line interface of Access Points running AOS-10 and AOS-8 Instant could allow an authenticated remote attacker to execute system commands in a restricted shell environment. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.

Affected products

VendorProductAffected versions
ArubanetworksArubaos
from 6.4.0.0 through 6.5.4.24
from 8.4.0.0 before 8.10.0.22
from 8.11.0.0 before 8.12.0.7
from 8.13.0.0 before 8.13.1.2
from 10.3.0.0 before 10.4.1.11
from 10.5.0.0 before 10.7.2.3

Weakness classification

References