CVE-2026-95715 Hewlett Packard Enterprise (HPE) CVE debrief

Who should care

Defenders responsible for HPE ArubaOS (AOS) devices, particularly those with physical access to the devices, should assess exposure and prioritize remediation. This includes operators, platform administrators, vulnerability management teams, and security teams responsible for ensuring the security and integrity of AOS-10 deployments.

Why it matters

CVE-2026-95715 is a medium-severity vulnerability in HPE ArubaOS (AOS) that allows unauthenticated local command injection. Defenders should prioritize verifying and upgrading affected versions, implementing compensating controls, and monitoring for suspicious activity to prevent potential system compromise.

• Potential for complete system compromise if exploited
• Need for verification of affected versions and upgrade to secure releases
• Importance of implementing compensating controls to restrict physical access
• Requirement for monitoring and logging to detect suspicious activity

Technical summary

The vulnerability exists in the command line interface of AOS-10, allowing an attacker with physical access to execute arbitrary commands as a privileged user. Affected versions include 10.8.0.0 through 10.8.1.1, 10.7.0.0 through 10.7.2.6, and 10.4.0.0 through 10.4.1.13. Successful exploitation could allow an attacker to execute arbitrary commands, potentially leading to complete system compromise. Defenders should prioritize verifying and upgrading affected AOS versions, implementing compensating controls, and monitoring for suspicious activity.

Defensive priority

Defenders should prioritize verifying and upgrading affected AOS versions, implementing compensating controls, and monitoring for suspicious activity.

Recommended defensive actions

• Verify and upgrade affected AOS versions to the latest secure releases
• Implement compensating controls, such as restricting physical access to devices
• Monitor for suspicious activity and implement logging and alerting
• Review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up
• Plan vendor-supported updates or mitigations through normal change control where exposure is confirmed
• Check relevant monitoring, detection, and logs for exposed assets that need extra review

Evidence notes

The CVE Program and NVD provide official records of the vulnerability. HPE ArubaOS (AOS) versions 10.8.0.0 through 10.8.1.1, 10.7.0.0 through 10.7.2.6, and 10.4.0.0 through 10.4.1.13 are affected. The vulnerability exists in the command line interface of AOS-10, allowing an attacker with physical access to execute arbitrary commands as a privileged user. Defenders should verify affected versions, review official advisories, and monitor for suspicious activity.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.