CVE-2026-95719 — Authenticated Arbitrary File Deletion Vulnerability leads to Denial-of-Service in AOS-10

CVE-2026-95719

Authenticated Arbitrary File Deletion Vulnerability leads to Denial-of-Service in AOS-10 PUBLISHED

Description (CNA)

An arbitrary file deletion vulnerability exists in the command line interface of AOS-10 that could allow an authenticated attacker with administrative privileges to cause a denial of service. Successful exploitation could allow an attacker to crash the system, preventing it from rebooting without manual intervention and disrupting normal operation of the affected device.

Affected (CNA)

Vendor / product	Versions
Hewlett Packard Enterprise (HPE) / ArubaOS (AOS)	affected 10.8.0.0 through 10.8.1.1; affected 10.7.0.0 through 10.7.2.6; affected 10.4.0.0 through 10.4.1.13

CWE

No CWE identifiers supplied.

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05162en_us&docLocale=en_US

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.