CVE-2026-44867
Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Successful exploitation of these vulnerabilities could allow an authenticated remote attacker to execute arbitrary commands on the underlying operating system.
- Score
- CVSS 3.1 8.8 High
- Status
- Analyzed - security-alert@hpe.com
- Published
- 2026-05-12
- Last modified
- 2026-10-26
- Weaknesses
- CWE-77
Affected products
- Arubaos (Arubanetworks)
- Sd-wan (Arubanetworks)
- Hpe Aruba Networking Wireless Operating System Aos (Hewlett Packard Enterprise Hpe)
References
- https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05048en_us&docLocale=en_US
