← Vulnerability feed

Vulnerability record · CVE-2021-37726 · published 12 October 2021

CVE-2021-37726: Arubanetworks aruba instant classic buffer overflow vulnerability

Arubanetworks · Aruba Instant

A remote buffer overflow vulnerability was discovered in HPE Aruba Instant (IAP) version(s): Aruba Instant 8.7.x.x: 8.7.0.0 through 8.7.1.2. Aruba has released patches for Aruba Instant (IAP) that address this security vulnerability.

9.8 CVSS 3.1 Critical EPSS 2.4% · top 16.6% CWE-120 · Classic buffer overflow
9.8CVSS 3.1 base score, v2 10.0
2.4%EPSS exploitation probability, 30 days
NoNot in CISA KEV
2Affected product versions listed by NVD
4References
17 Jun 2026Last modified by NVD

Description

A remote buffer overflow vulnerability was discovered in HPE Aruba Instant (IAP) version(s): Aruba Instant 8.7.x.x: 8.7.0.0 through 8.7.1.2. Aruba has released patches for Aruba Instant (IAP) that address this security vulnerability.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

2 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://cert-portal.siemens.com/productcert/pdf/ssa-917476.pdf Third Party Advisory
https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-017.txt Vendor Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-917476.pdf Third Party Advisory
https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-017.txt Vendor Advisory

Track CVE-2021-37726 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2022-37885Arubanetworks arubaos classic buffer overflow vulnerabilityThere are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending special…EPSS 1.5%9.8CVE-2022-37886Arubanetworks arubaos classic buffer overflow vulnerabilityThere are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending special…EPSS 1.5%9.8CVE-2022-37887Arubanetworks arubaos classic buffer overflow vulnerabilityThere are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending special…EPSS 1.7%9.8CVE-2022-37889Arubanetworks arubaos classic buffer overflow vulnerabilityThere are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending special…EPSS 1.7%9.8CVE-2022-37890Arubanetworks arubaos classic buffer overflow vulnerabilityUnauthenticated buffer overflow vulnerabilities exist within the Aruba InstantOS and ArubaOS 10 web management interface. Successful exploitation res…EPSS 1.2%9.8CVE-2022-37891Arubanetworks arubaos classic buffer overflow vulnerabilityUnauthenticated buffer overflow vulnerabilities exist within the Aruba InstantOS and ArubaOS 10 web management interface. Successful exploitation res…EPSS 1.2%9.8CVE-2022-37888Arubanetworks arubaos classic buffer overflow vulnerabilityThere are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending special…EPSS 1.7%9.8CVE-2021-37716Arubanetworks sd-wan classic buffer overflow vulnerabilityA remote buffer overflow vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6…EPSS 2.4%

Source: NIST National Vulnerability Database (record CVE-2021-37726), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.