CVE-2025-27078: Hewlett Packard Enterprise HPE Aos-10 Ap

Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days.

A vulnerability in a system binary of AOS-8 Instant and AOS-10 AP could allow an authenticated remote attacker to inject commands into the underlying operating system while using the CLI. Successful exploitation could lead to complete system compromise.

Affected products

• Hewlett Packard Enterprise HPE Aos-10 Ap: from 10.7.0.0, up to and including 10.7.0.1; from 10.4.0.0, up to and including 10.4.1.5; from 8.12.0.0, up to and including 8.12.0.3; from 8.10.0.0, up to and including 8.10.0.15

Published 2025-04-08. Last modified 2026-06-17.