Search

Find a vulnerability

Search criteria Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.

    1515 vulnerabilities

    CVE-2026-44879 (GCVE-0-2026-44879)

    Vulnerability from cvelistv5 – Published: 2026-07-21 20:42 – Updated: 2026-07-23 13:31
    VLAI
    Title
    Authenticated Command Injection allows arbitrary command execution in CLI Interface
    Summary
    A vulnerability in the command line interface of ECOS devices could allow a highly privileged, authenticated remote attacker to perform command injection on certain CLI commands. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-77 - Improper Neutralization of Special Elements used in a Command ('Command Injection')
    Assigner
    hpe
    Impacted products
    Vendor Product Version
    Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateway (ECOS) Affected: 9.4.0.0 , ≤ 9.4.4.0 (semver)
    Affected: 9.5.0.0 , ≤ 9.5.4.0 (semver)
    Create a notification for this product.
    Credits
    moonv
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-44879",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-07-23T13:31:05.643166Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "problemTypes": [
              {
                "descriptions": [
                  {
                    "cweId": "CWE-77",
                    "description": "CWE-77 Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)",
                    "lang": "en",
                    "type": "CWE"
                  }
                ]
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-07-23T13:31:22.744Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "affected",
              "product": "EdgeConnect SD-WAN Gateway (ECOS)",
              "vendor": "Hewlett Packard Enterprise (HPE)",
              "versions": [
                {
                  "lessThanOrEqual": "9.4.4.0",
                  "status": "affected",
                  "version": "9.4.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "9.5.4.0",
                  "status": "affected",
                  "version": "9.5.0.0",
                  "versionType": "semver"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "reporter",
              "value": "moonv"
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "\u003cp\u003eA vulnerability in the command line interface of ECOS devices could allow a highly privileged, authenticated remote attacker to perform command injection on certain CLI commands. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.\u003c/p\u003e"
                }
              ],
              "value": "A vulnerability in the command line interface of ECOS devices could allow a highly privileged, authenticated remote attacker to perform command injection on certain CLI commands. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 7.2,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "HIGH",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-07-21T20:43:14.138Z",
            "orgId": "eb103674-0d28-4225-80f8-39fb86215de0",
            "shortName": "hpe"
          },
          "references": [
            {
              "url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05013en_us\u0026docLocale=en_US"
            }
          ],
          "source": {
            "advisory": "HPESBNW05013",
            "discovery": "EXTERNAL"
          },
          "title": "Authenticated Command Injection allows arbitrary command execution in CLI Interface",
          "x_generator": {
            "engine": "Vulnogram 0.2.0"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "eb103674-0d28-4225-80f8-39fb86215de0",
        "assignerShortName": "hpe",
        "cveId": "CVE-2026-44879",
        "datePublished": "2026-07-21T20:42:48.014Z",
        "dateReserved": "2026-05-07T21:29:22.243Z",
        "dateUpdated": "2026-07-23T13:31:22.744Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-44878 (GCVE-0-2026-44878)

    Vulnerability from cvelistv5 – Published: 2026-07-21 20:42 – Updated: 2026-07-23 13:29
    VLAI
    Title
    Authenticated Path Traversal allows Unauthorized Access in Web Interface
    Summary
    A vulnerability in the web-based management interface of an ECOS device could allow a highly privileged, authenticated remote attacker to access the device's filesystem. Successful exploitation of this vulnerability could allow an attacker to access sensitive files and tamper with or delete system data.
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-377 - Insecure Temporary File
    • CWE-732 - Incorrect Permission Assignment for Critical Resource
    Assigner
    hpe
    Impacted products
    Vendor Product Version
    Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateway (ECOS) Affected: 9.4.0.0 , ≤ 9.4.6.0 (semver)
    Affected: 9.5.0.0 , ≤ 9.5.6.0 (semver)
    Affected: 9.6.0.0 , ≤ 9.6.1.0 (semver)
    Create a notification for this product.
    Credits
    moonv
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-44878",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-07-23T13:29:12.335150Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "problemTypes": [
              {
                "descriptions": [
                  {
                    "cweId": "CWE-377",
                    "description": "CWE-377 Insecure Temporary File",
                    "lang": "en",
                    "type": "CWE"
                  }
                ]
              },
              {
                "descriptions": [
                  {
                    "cweId": "CWE-732",
                    "description": "CWE-732 Incorrect Permission Assignment for Critical Resource",
                    "lang": "en",
                    "type": "CWE"
                  }
                ]
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-07-23T13:29:55.282Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "affected",
              "product": "EdgeConnect SD-WAN Gateway (ECOS)",
              "vendor": "Hewlett Packard Enterprise (HPE)",
              "versions": [
                {
                  "lessThanOrEqual": "9.4.6.0",
                  "status": "affected",
                  "version": "9.4.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "9.5.6.0",
                  "status": "affected",
                  "version": "9.5.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "9.6.1.0",
                  "status": "affected",
                  "version": "9.6.0.0",
                  "versionType": "semver"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "reporter",
              "value": "moonv"
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "\u003cp\u003eA vulnerability in the web-based management interface of an ECOS device could allow a highly privileged, authenticated remote attacker to access the device\u0027s filesystem. Successful exploitation of this vulnerability could allow an attacker to access sensitive files and tamper with or delete system data.\u003c/p\u003e"
                }
              ],
              "value": "A vulnerability in the web-based management interface of an ECOS device could allow a highly privileged, authenticated remote attacker to access the device\u0027s filesystem. Successful exploitation of this vulnerability could allow an attacker to access sensitive files and tamper with or delete system data."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 7.2,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "HIGH",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-07-21T20:42:17.908Z",
            "orgId": "eb103674-0d28-4225-80f8-39fb86215de0",
            "shortName": "hpe"
          },
          "references": [
            {
              "url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05013en_us\u0026docLocale=en_US"
            }
          ],
          "source": {
            "advisory": "HPESBNW05013",
            "discovery": "EXTERNAL"
          },
          "title": "Authenticated Path Traversal allows Unauthorized Access in Web Interface",
          "x_generator": {
            "engine": "Vulnogram 0.2.0"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "eb103674-0d28-4225-80f8-39fb86215de0",
        "assignerShortName": "hpe",
        "cveId": "CVE-2026-44878",
        "datePublished": "2026-07-21T20:42:17.908Z",
        "dateReserved": "2026-05-07T21:29:22.243Z",
        "dateUpdated": "2026-07-23T13:29:55.282Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-63454 (GCVE-0-2026-63454)

    Vulnerability from cvelistv5 – Published: 2026-07-21 18:02 – Updated: 2026-07-24 03:55
    VLAI
    Title
    Authenticated Path Traversal Vulnerability Leads to Remote Code Execution in AOS-CX
    Summary
    An authenticated path traversal vulnerability exists in AOS-CX. Successful exploitation of this vulnerability allows an attacker to copy arbitrary files to a user readable location from the command line interface of the underlying operating system, which could lead to remote code execution.
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
    Assigner
    hpe
    Impacted products
    Vendor Product Version
    Hewlett Packard Enterprise (HPE) AOS-CX Affected: 10.17.0000 , ≤ 10.17.1020 (semver)
    Affected: 10.16.0000 , ≤ 10.16.1050 (semver)
    Affected: 10.13.0000 , ≤ 10.13.1180 (semver)
    Affected: 10.18.0000 , < 10.18.0001 (semver)
    Create a notification for this product.
    Credits
    This vulnerability was discovered by moonv through the HPE Aruba Networking Bug Bounty program.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-63454",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-07-23T00:00:00+00:00",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "problemTypes": [
              {
                "descriptions": [
                  {
                    "cweId": "CWE-22",
                    "description": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
                    "lang": "en",
                    "type": "CWE"
                  }
                ]
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-07-24T03:55:52.403Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "affected",
              "product": "AOS-CX",
              "vendor": "Hewlett Packard Enterprise (HPE)",
              "versions": [
                {
                  "lessThanOrEqual": "10.17.1020",
                  "status": "affected",
                  "version": "10.17.0000",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.16.1050",
                  "status": "affected",
                  "version": "10.16.0000",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.13.1180",
                  "status": "affected",
                  "version": "10.13.0000",
                  "versionType": "semver"
                },
                {
                  "lessThan": "10.18.0001",
                  "status": "affected",
                  "version": "10.18.0000",
                  "versionType": "semver"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "reporter",
              "value": "This vulnerability was discovered by moonv through the HPE Aruba Networking Bug Bounty program."
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "\u003cp\u003eAn authenticated path traversal vulnerability exists in AOS-CX. Successful exploitation of this vulnerability allows an attacker to copy arbitrary files to a user readable location from the command line interface of the underlying operating system, which could lead to remote code execution.\u003c/p\u003e"
                }
              ],
              "value": "An authenticated path traversal vulnerability exists in AOS-CX. Successful exploitation of this vulnerability allows an attacker to copy arbitrary files to a user readable location from the command line interface of the underlying operating system, which could lead to remote code execution."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 7.2,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "HIGH",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-07-21T18:02:25.136Z",
            "orgId": "eb103674-0d28-4225-80f8-39fb86215de0",
            "shortName": "hpe"
          },
          "references": [
            {
              "url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05081en_us\u0026docLocale=en_US"
            }
          ],
          "source": {
            "advisory": "HPESBNW05081",
            "discovery": "INTERNAL"
          },
          "title": "Authenticated Path Traversal Vulnerability Leads to Remote Code Execution in AOS-CX",
          "x_generator": {
            "engine": "Vulnogram 0.2.0"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "eb103674-0d28-4225-80f8-39fb86215de0",
        "assignerShortName": "hpe",
        "cveId": "CVE-2026-63454",
        "datePublished": "2026-07-21T18:02:25.136Z",
        "dateReserved": "2026-07-16T19:47:44.513Z",
        "dateUpdated": "2026-07-24T03:55:52.403Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-63453 (GCVE-0-2026-63453)

    Vulnerability from cvelistv5 – Published: 2026-07-21 18:02 – Updated: 2026-07-24 03:55
    VLAI
    Title
    Authenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-CX
    Summary
    Buffer overflow vulnerabilities exist in the command line interface of AOS-CX. Successful exploitation of these vulnerabilities could allow a remote high-privileged user to execute arbitrary code as a privileged user on the underlying operating system.
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
    Assigner
    hpe
    Impacted products
    Vendor Product Version
    Hewlett Packard Enterprise (HPE) AOS-CX Affected: 10.17.0000 , ≤ 10.17.1020 (semver)
    Affected: 10.16.0000 , ≤ 10.16.1050 (semver)
    Affected: 10.13.0000 , ≤ 10.13.1170 (semver)
    Affected: 10.18.0000 , < 10.18.0001 (semver)
    Create a notification for this product.
    Credits
    This vulnerability was discovered by LIUPENG through the HPE Aruba Networking Bug Bounty program.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-63453",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-07-23T00:00:00+00:00",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "problemTypes": [
              {
                "descriptions": [
                  {
                    "cweId": "CWE-120",
                    "description": "CWE-120 Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
                    "lang": "en",
                    "type": "CWE"
                  }
                ]
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-07-24T03:55:51.615Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "affected",
              "product": "AOS-CX",
              "vendor": "Hewlett Packard Enterprise (HPE)",
              "versions": [
                {
                  "lessThanOrEqual": "10.17.1020",
                  "status": "affected",
                  "version": "10.17.0000",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.16.1050",
                  "status": "affected",
                  "version": "10.16.0000",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.13.1170",
                  "status": "affected",
                  "version": "10.13.0000",
                  "versionType": "semver"
                },
                {
                  "lessThan": "10.18.0001",
                  "status": "affected",
                  "version": "10.18.0000",
                  "versionType": "semver"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "reporter",
              "value": "This vulnerability was discovered by LIUPENG through the HPE Aruba Networking Bug Bounty program."
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "\u003cp\u003eBuffer overflow vulnerabilities exist in the command line interface of AOS-CX. Successful exploitation of these vulnerabilities could allow a remote high-privileged user to execute arbitrary code as a privileged user on the underlying operating system.\u003c/p\u003e"
                }
              ],
              "value": "Buffer overflow vulnerabilities exist in the command line interface of AOS-CX. Successful exploitation of these vulnerabilities could allow a remote high-privileged user to execute arbitrary code as a privileged user on the underlying operating system."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 7.2,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "HIGH",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-07-21T18:02:19.929Z",
            "orgId": "eb103674-0d28-4225-80f8-39fb86215de0",
            "shortName": "hpe"
          },
          "references": [
            {
              "url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05081en_us\u0026docLocale=en_US"
            }
          ],
          "source": {
            "advisory": "HPESBNW05081",
            "discovery": "INTERNAL"
          },
          "title": "Authenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-CX",
          "x_generator": {
            "engine": "Vulnogram 0.2.0"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "eb103674-0d28-4225-80f8-39fb86215de0",
        "assignerShortName": "hpe",
        "cveId": "CVE-2026-63453",
        "datePublished": "2026-07-21T18:02:19.929Z",
        "dateReserved": "2026-07-16T19:47:44.513Z",
        "dateUpdated": "2026-07-24T03:55:51.615Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-44880 (GCVE-0-2026-44880)

    Vulnerability from cvelistv5 – Published: 2026-07-21 18:01 – Updated: 2026-07-24 03:55
    VLAI
    Title
    Low-Privilege Authenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-CX
    Summary
    A buffer overflow vulnerability was found in the command line interface of AOS-CX. Successful exploitation of these vulnerabilities could allow an remote low-privileged user to execute arbitrary code as a privileged user on the underlying operating system.
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
    Assigner
    hpe
    Impacted products
    Vendor Product Version
    Hewlett Packard Enterprise (HPE) AOS-CX Affected: 10.17.0000 , ≤ 10.17.1020 (semver)
    Affected: 10.16.0000 , ≤ 10.16.1050 (semver)
    Affected: 10.13.0000 , ≤ 10.13.1170 (semver)
    Affected: 10.18.0000 , < 10.18.0001 (semver)
    Create a notification for this product.
    Credits
    This vulnerability was discovered by moonv through the HPE Aruba Networking Bug Bounty program.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-44880",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-07-23T00:00:00+00:00",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "problemTypes": [
              {
                "descriptions": [
                  {
                    "cweId": "CWE-120",
                    "description": "CWE-120 Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
                    "lang": "en",
                    "type": "CWE"
                  }
                ]
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-07-24T03:55:50.739Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "affected",
              "product": "AOS-CX",
              "vendor": "Hewlett Packard Enterprise (HPE)",
              "versions": [
                {
                  "lessThanOrEqual": "10.17.1020",
                  "status": "affected",
                  "version": "10.17.0000",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.16.1050",
                  "status": "affected",
                  "version": "10.16.0000",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.13.1170",
                  "status": "affected",
                  "version": "10.13.0000",
                  "versionType": "semver"
                },
                {
                  "lessThan": "10.18.0001",
                  "status": "affected",
                  "version": "10.18.0000",
                  "versionType": "semver"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "reporter",
              "value": "This vulnerability was discovered by moonv through the HPE Aruba Networking Bug Bounty program."
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "\u003cp\u003eA buffer overflow vulnerability was found in the command line interface of AOS-CX. Successful exploitation of these vulnerabilities could allow an remote low-privileged user to execute arbitrary code as a privileged user on the underlying operating system.\u003c/p\u003e"
                }
              ],
              "value": "A buffer overflow vulnerability was found in the command line interface of AOS-CX. Successful exploitation of these vulnerabilities could allow an remote low-privileged user to execute arbitrary code as a privileged user on the underlying operating system."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 8.8,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-07-21T18:01:52.885Z",
            "orgId": "eb103674-0d28-4225-80f8-39fb86215de0",
            "shortName": "hpe"
          },
          "references": [
            {
              "url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05081en_us\u0026docLocale=en_US"
            }
          ],
          "source": {
            "advisory": "HPESBNW05081",
            "discovery": "INTERNAL"
          },
          "title": "Low-Privilege Authenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-CX",
          "x_generator": {
            "engine": "Vulnogram 0.2.0"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "eb103674-0d28-4225-80f8-39fb86215de0",
        "assignerShortName": "hpe",
        "cveId": "CVE-2026-44880",
        "datePublished": "2026-07-21T18:01:52.885Z",
        "dateReserved": "2026-05-07T21:29:22.244Z",
        "dateUpdated": "2026-07-24T03:55:50.739Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-44877 (GCVE-0-2026-44877)

    Vulnerability from cvelistv5 – Published: 2026-07-07 19:03 – Updated: 2026-07-07 20:31
    VLAI
    Title
    Unauthenticated Remote Disclosure of Cryptographic Secrets
    Summary
    An unauthenticated remote disclosure vulnerability has been identified in HPE Networking Instant On 1830, 1930, and 1960 Switches. Successful exploitation of this vulnerability could allow an unauthenticated remote threat actor to access sensitive cryptographic secrets on a vulnerable system.
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor
    Assigner
    hpe
    Impacted products
    Date Public
    2026-07-07 16:00
    Credits
    Aaron P. Davis
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-44877",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-07-07T20:31:39.854857Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "problemTypes": [
              {
                "descriptions": [
                  {
                    "cweId": "CWE-200",
                    "description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor",
                    "lang": "en",
                    "type": "CWE"
                  }
                ]
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-07-07T20:31:53.068Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "affected",
              "platforms": [
                "Switch Model 1830",
                "Switch Model 1930",
                "Switch Model 1960"
              ],
              "product": "HPE Networking Instant On",
              "vendor": "Hewlett Packard Enterprise (HPE)",
              "versions": [
                {
                  "lessThanOrEqual": "3.3.3",
                  "status": "affected",
                  "version": "3.0.0",
                  "versionType": "semver"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "reporter",
              "value": "Aaron P. Davis"
            }
          ],
          "datePublic": "2026-07-07T16:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "\u003cp\u003eAn unauthenticated remote disclosure vulnerability has been identified in HPE Networking Instant On 1830, 1930, and 1960 Switches. Successful exploitation of this vulnerability could allow an unauthenticated remote threat actor to access sensitive cryptographic secrets on a vulnerable system.\u003c/p\u003e"
                }
              ],
              "value": "An unauthenticated remote disclosure vulnerability has been identified in HPE Networking Instant On 1830, 1930, and 1960 Switches. Successful exploitation of this vulnerability could allow an unauthenticated remote threat actor to access sensitive cryptographic secrets on a vulnerable system."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "NONE",
                "baseScore": 6.5,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "NONE",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-07-07T19:03:35.253Z",
            "orgId": "eb103674-0d28-4225-80f8-39fb86215de0",
            "shortName": "hpe"
          },
          "references": [
            {
              "url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05038en_us\u0026docLocale=en_US"
            }
          ],
          "source": {
            "advisory": "HPESBNW05038",
            "discovery": "EXTERNAL"
          },
          "title": "Unauthenticated Remote Disclosure of Cryptographic Secrets",
          "x_generator": {
            "engine": "Vulnogram 0.2.0"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "eb103674-0d28-4225-80f8-39fb86215de0",
        "assignerShortName": "hpe",
        "cveId": "CVE-2026-44877",
        "datePublished": "2026-07-07T19:03:35.253Z",
        "dateReserved": "2026-05-07T21:29:22.243Z",
        "dateUpdated": "2026-07-07T20:31:53.068Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-44871 (GCVE-0-2026-44871)

    Vulnerability from cvelistv5 – Published: 2026-05-12 21:06 – Updated: 2026-05-14 03:56
    VLAI
    Title
    Authenticated Command Injection Vulnerabilities in Command Line Interface (CLI) Service Accessed by PAPI Protocol of AOS-8 and AOS-10 Operating Systems
    Summary
    Command injection vulnerabilities exist in the command line interface (CLI) service accessed by the PAPI protocol of AOS-8 and AOS-10 Operating Systems. Successful exploitation of these vulnerabilities could allow an authenticated remote attacker to execute arbitrary commands on the underlying operating system.
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-77 - Improper Neutralization of Special Elements used in a Command ('Command Injection')
    Assigner
    hpe
    Impacted products
    Vendor Product Version
    Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS) Affected: 8.13.0.0 , ≤ 8.13.1.1 (semver)
    Affected: 8.12.0.0 , ≤ 8.12.0.6 (semver)
    Affected: 8.10.0.0 , ≤ 8.10.0.21 (semver)
    Affected: 10.7.0.0 , ≤ 10.7.2.2 (semver)
    Affected: 10.8.0.0 (semver)
    Affected: 10.4.0.0 , ≤ 10.4.1.10 (semver)
    Create a notification for this product.
    Credits
    zzcentury
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-44871",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-05-13T00:00:00+00:00",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "problemTypes": [
              {
                "descriptions": [
                  {
                    "cweId": "CWE-77",
                    "description": "CWE-77 Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)",
                    "lang": "en",
                    "type": "CWE"
                  }
                ]
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-05-14T03:56:13.003Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "affected",
              "product": "HPE Aruba Networking Wireless Operating System (AOS)",
              "vendor": "Hewlett Packard Enterprise (HPE)",
              "versions": [
                {
                  "lessThanOrEqual": "8.13.1.1",
                  "status": "affected",
                  "version": "8.13.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "8.12.0.6",
                  "status": "affected",
                  "version": "8.12.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "8.10.0.21",
                  "status": "affected",
                  "version": "8.10.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.7.2.2",
                  "status": "affected",
                  "version": "10.7.0.0",
                  "versionType": "semver"
                },
                {
                  "status": "affected",
                  "version": "10.8.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.4.1.10",
                  "status": "affected",
                  "version": "10.4.0.0",
                  "versionType": "semver"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "reporter",
              "value": "zzcentury"
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "\u003cp\u003eCommand injection vulnerabilities exist in the command line interface (CLI) service accessed by the PAPI protocol of AOS-8 and AOS-10 Operating Systems. Successful exploitation of these vulnerabilities could allow an authenticated remote attacker to execute arbitrary commands on the underlying operating system.\u003c/p\u003e"
                }
              ],
              "value": "Command injection vulnerabilities exist in the command line interface (CLI) service accessed by the PAPI protocol of AOS-8 and AOS-10 Operating Systems. Successful exploitation of these vulnerabilities could allow an authenticated remote attacker to execute arbitrary commands on the underlying operating system."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 7.2,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "HIGH",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-05-12T21:06:12.315Z",
            "orgId": "eb103674-0d28-4225-80f8-39fb86215de0",
            "shortName": "hpe"
          },
          "references": [
            {
              "url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05048en_us\u0026docLocale=en_US"
            }
          ],
          "source": {
            "advisory": "HPESBNW05048",
            "discovery": "INTERNAL"
          },
          "title": "Authenticated Command Injection Vulnerabilities in Command Line Interface (CLI) Service Accessed by PAPI Protocol of AOS-8 and AOS-10 Operating Systems",
          "x_generator": {
            "engine": "Vulnogram 0.2.0"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "eb103674-0d28-4225-80f8-39fb86215de0",
        "assignerShortName": "hpe",
        "cveId": "CVE-2026-44871",
        "datePublished": "2026-05-12T21:06:12.315Z",
        "dateReserved": "2026-05-07T21:29:22.242Z",
        "dateUpdated": "2026-05-14T03:56:13.003Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-44873 (GCVE-0-2026-44873)

    Vulnerability from cvelistv5 – Published: 2026-05-12 19:19 – Updated: 2026-05-15 20:06
    VLAI
    Title
    Insufficient Session Invalidation on User Account Deactivation in AOS-8 Operating System
    Summary
    A session management vulnerability in AOS-8 allows previously authenticated users to retain network access after their accounts are administratively disabled. Existing sessions are not invalidated when credentials are revoked, enabling continued access until session expiration. An attacker with compromised credentials could exploit this behavior to maintain unauthorized access even after the account has been disabled.
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-613 - Insufficient Session Expiration
    Assigner
    hpe
    Impacted products
    Vendor Product Version
    Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS) Affected: 8.13.0.0 , ≤ 8.13.1.1 (semver)
    Affected: 8.12.0.0 , ≤ 8.12.0.6 (semver)
    Affected: 8.10.0.0 , ≤ 8.10.0.21 (semver)
    Create a notification for this product.
    Credits
    0x50d
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-44873",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-05-12T19:47:14.121440Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "problemTypes": [
              {
                "descriptions": [
                  {
                    "cweId": "CWE-613",
                    "description": "CWE-613 Insufficient Session Expiration",
                    "lang": "en",
                    "type": "CWE"
                  }
                ]
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-05-15T20:06:05.460Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "affected",
              "product": "HPE Aruba Networking Wireless Operating System (AOS)",
              "vendor": "Hewlett Packard Enterprise (HPE)",
              "versions": [
                {
                  "lessThanOrEqual": "8.13.1.1",
                  "status": "affected",
                  "version": "8.13.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "8.12.0.6",
                  "status": "affected",
                  "version": "8.12.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "8.10.0.21",
                  "status": "affected",
                  "version": "8.10.0.0",
                  "versionType": "semver"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "reporter",
              "value": "0x50d"
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "\u003cp\u003eA session management vulnerability in AOS-8 allows previously authenticated users to retain network access after their accounts are administratively disabled. Existing sessions are not invalidated when credentials are revoked, enabling continued access until session expiration. An attacker with compromised credentials could exploit this behavior to maintain unauthorized access even after the account has been disabled.\u003c/p\u003e"
                }
              ],
              "value": "A session management vulnerability in AOS-8 allows previously authenticated users to retain network access after their accounts are administratively disabled. Existing sessions are not invalidated when credentials are revoked, enabling continued access until session expiration. An attacker with compromised credentials could exploit this behavior to maintain unauthorized access even after the account has been disabled."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "NONE",
                "baseScore": 5.4,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "LOW",
                "integrityImpact": "LOW",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-05-12T19:19:59.595Z",
            "orgId": "eb103674-0d28-4225-80f8-39fb86215de0",
            "shortName": "hpe"
          },
          "references": [
            {
              "url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05048en_us\u0026docLocale=en_US"
            }
          ],
          "source": {
            "advisory": "HPESBNW05048",
            "discovery": "INTERNAL"
          },
          "title": "Insufficient Session Invalidation on User Account Deactivation in AOS-8 Operating System",
          "x_generator": {
            "engine": "Vulnogram 0.2.0"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "eb103674-0d28-4225-80f8-39fb86215de0",
        "assignerShortName": "hpe",
        "cveId": "CVE-2026-44873",
        "datePublished": "2026-05-12T19:19:59.595Z",
        "dateReserved": "2026-05-07T21:29:22.243Z",
        "dateUpdated": "2026-05-15T20:06:05.460Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-44874 (GCVE-0-2026-44874)

    Vulnerability from cvelistv5 – Published: 2026-05-12 19:19 – Updated: 2026-05-15 20:05
    VLAI
    Title
    Authenticated Arbitrary File Download via AOS-10 Web-Based Management Interface
    Summary
    A vulnerability exists in the web-based management interface of an AOS-10 Gateway that could allow an authenticated remote attacker to access sensitive files on the underlying operating system. Successful exploitation of this vulnerability could result in the disclosure of confidential system information, potentially enabling further attacks against the affected device.
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-284 - Improper Access Control
    Assigner
    hpe
    Impacted products
    Vendor Product Version
    Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS) Affected: 10.7.0.0 , ≤ 10.7.2.2 (semver)
    Affected: 10.8.0.0 (semver)
    Affected: 10.4.0.0 , ≤ 10.4.1.10 (semver)
    Create a notification for this product.
    Credits
    zzcentury
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-44874",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-05-12T19:49:05.874201Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "problemTypes": [
              {
                "descriptions": [
                  {
                    "cweId": "CWE-284",
                    "description": "CWE-284 Improper Access Control",
                    "lang": "en",
                    "type": "CWE"
                  }
                ]
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-05-15T20:05:06.617Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "affected",
              "product": "HPE Aruba Networking Wireless Operating System (AOS)",
              "vendor": "Hewlett Packard Enterprise (HPE)",
              "versions": [
                {
                  "lessThanOrEqual": "10.7.2.2",
                  "status": "affected",
                  "version": "10.7.0.0",
                  "versionType": "semver"
                },
                {
                  "status": "affected",
                  "version": "10.8.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.4.1.10",
                  "status": "affected",
                  "version": "10.4.0.0",
                  "versionType": "semver"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "reporter",
              "value": "zzcentury"
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "\u003cp\u003eA vulnerability exists in the web-based management interface of an AOS-10 Gateway that could allow an authenticated remote attacker to access sensitive files on the underlying operating system. Successful exploitation of this vulnerability could result in the disclosure of confidential system information, potentially enabling further attacks against the affected device.\u003c/p\u003e"
                }
              ],
              "value": "A vulnerability exists in the web-based management interface of an AOS-10 Gateway that could allow an authenticated remote attacker to access sensitive files on the underlying operating system. Successful exploitation of this vulnerability could result in the disclosure of confidential system information, potentially enabling further attacks against the affected device."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "NONE",
                "baseScore": 4.9,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "NONE",
                "privilegesRequired": "HIGH",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-05-12T19:19:25.459Z",
            "orgId": "eb103674-0d28-4225-80f8-39fb86215de0",
            "shortName": "hpe"
          },
          "references": [
            {
              "url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05048en_us\u0026docLocale=en_US"
            }
          ],
          "source": {
            "advisory": "HPESBNW05048",
            "discovery": "INTERNAL"
          },
          "title": "Authenticated Arbitrary File Download via AOS-10 Web-Based Management Interface",
          "x_generator": {
            "engine": "Vulnogram 0.2.0"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "eb103674-0d28-4225-80f8-39fb86215de0",
        "assignerShortName": "hpe",
        "cveId": "CVE-2026-44874",
        "datePublished": "2026-05-12T19:19:25.459Z",
        "dateReserved": "2026-05-07T21:29:22.243Z",
        "dateUpdated": "2026-05-15T20:05:06.617Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-44872 (GCVE-0-2026-44872)

    Vulnerability from cvelistv5 – Published: 2026-05-12 19:18 – Updated: 2026-05-15 20:04
    VLAI
    Title
    Authenticated Arbitrary File Upload via Command Injection in AOS-8 AND AOS-10 Web-Based Management Interface
    Summary
    A command injection vulnerability exists in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Successful exploitation could allow an authenticated remote attacker to place arbitrary files on the underlying filesystem of the affected device.
    SSVC
    Exploitation: none Automatable: yes Technical Impact: total
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-77 - Improper Neutralization of Special Elements used in a Command ('Command Injection')
    Assigner
    hpe
    Impacted products
    Vendor Product Version
    Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS) Affected: 8.13.0.0 , ≤ 8.13.1.1 (semver)
    Affected: 8.12.0.0 , ≤ 8.12.0.6 (semver)
    Affected: 8.10.0.0 , ≤ 8.10.0.21 (semver)
    Affected: 10.7.0.0 , ≤ 10.7.2.2 (semver)
    Affected: 10.8.0.0 (semver)
    Affected: 10.4.0.0 , ≤ 10.4.1.10 (semver)
    Create a notification for this product.
    Credits
    zzcentury
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-44872",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "yes"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-05-13T12:34:34.342030Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "problemTypes": [
              {
                "descriptions": [
                  {
                    "cweId": "CWE-77",
                    "description": "CWE-77 Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)",
                    "lang": "en",
                    "type": "CWE"
                  }
                ]
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-05-15T20:04:56.217Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "affected",
              "product": "HPE Aruba Networking Wireless Operating System (AOS)",
              "vendor": "Hewlett Packard Enterprise (HPE)",
              "versions": [
                {
                  "lessThanOrEqual": "8.13.1.1",
                  "status": "affected",
                  "version": "8.13.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "8.12.0.6",
                  "status": "affected",
                  "version": "8.12.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "8.10.0.21",
                  "status": "affected",
                  "version": "8.10.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.7.2.2",
                  "status": "affected",
                  "version": "10.7.0.0",
                  "versionType": "semver"
                },
                {
                  "status": "affected",
                  "version": "10.8.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.4.1.10",
                  "status": "affected",
                  "version": "10.4.0.0",
                  "versionType": "semver"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "reporter",
              "value": "zzcentury"
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "\u003cp\u003eA command injection vulnerability exists in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Successful exploitation could allow an authenticated remote attacker to place arbitrary files on the underlying filesystem of the affected device.\u003c/p\u003e"
                }
              ],
              "value": "A command injection vulnerability exists in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Successful exploitation could allow an authenticated remote attacker to place arbitrary files on the underlying filesystem of the affected device."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 7.2,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "HIGH",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-05-12T19:18:16.627Z",
            "orgId": "eb103674-0d28-4225-80f8-39fb86215de0",
            "shortName": "hpe"
          },
          "references": [
            {
              "url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05048en_us\u0026docLocale=en_US"
            }
          ],
          "source": {
            "advisory": "HPESBNW05048",
            "discovery": "INTERNAL"
          },
          "title": "Authenticated Arbitrary File Upload via Command Injection in AOS-8 AND AOS-10 Web-Based Management Interface",
          "x_generator": {
            "engine": "Vulnogram 0.2.0"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "eb103674-0d28-4225-80f8-39fb86215de0",
        "assignerShortName": "hpe",
        "cveId": "CVE-2026-44872",
        "datePublished": "2026-05-12T19:18:16.627Z",
        "dateReserved": "2026-05-07T21:29:22.243Z",
        "dateUpdated": "2026-05-15T20:04:56.217Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-44870 (GCVE-0-2026-44870)

    Vulnerability from cvelistv5 – Published: 2026-05-12 19:16 – Updated: 2026-05-13 15:52
    VLAI
    Title
    Authenticated Command Injection Vulnerabilities in Command Line Interface (CLI) Service Accessed by PAPI Protocol of AOS-8 and AOS-10 Operating Systems
    Summary
    Command injection vulnerabilities exist in the command line interface (CLI) service accessed by the PAPI protocol of AOS-8 and AOS-10 Operating Systems. Successful exploitation of these vulnerabilities could allow an authenticated remote attacker to execute arbitrary commands on the underlying operating system.
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-77 - Improper Neutralization of Special Elements used in a Command ('Command Injection')
    Assigner
    hpe
    Impacted products
    Vendor Product Version
    Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS) Affected: 8.13.0.0 , ≤ 8.13.1.1 (semver)
    Affected: 8.12.0.0 , ≤ 8.12.0.6 (semver)
    Affected: 8.10.0.0 , ≤ 8.10.0.21 (semver)
    Affected: 10.7.0.0 , ≤ 10.7.2.2 (semver)
    Affected: 10.8.0.0 (semver)
    Affected: 10.4.0.0 , ≤ 10.4.1.10 (semver)
    Create a notification for this product.
    Credits
    zzcentury
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-44870",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-05-12T19:35:28.552532Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "problemTypes": [
              {
                "descriptions": [
                  {
                    "cweId": "CWE-77",
                    "description": "CWE-77 Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)",
                    "lang": "en",
                    "type": "CWE"
                  }
                ]
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-05-13T15:52:39.148Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "affected",
              "product": "HPE Aruba Networking Wireless Operating System (AOS)",
              "vendor": "Hewlett Packard Enterprise (HPE)",
              "versions": [
                {
                  "lessThanOrEqual": "8.13.1.1",
                  "status": "affected",
                  "version": "8.13.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "8.12.0.6",
                  "status": "affected",
                  "version": "8.12.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "8.10.0.21",
                  "status": "affected",
                  "version": "8.10.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.7.2.2",
                  "status": "affected",
                  "version": "10.7.0.0",
                  "versionType": "semver"
                },
                {
                  "status": "affected",
                  "version": "10.8.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.4.1.10",
                  "status": "affected",
                  "version": "10.4.0.0",
                  "versionType": "semver"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "reporter",
              "value": "zzcentury"
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "\u003cp\u003eCommand injection vulnerabilities exist in the command line interface (CLI) service accessed by the PAPI protocol of AOS-8 and AOS-10 Operating Systems. Successful exploitation of these vulnerabilities could allow an authenticated remote attacker to execute arbitrary commands on the underlying operating system.\u003c/p\u003e"
                }
              ],
              "value": "Command injection vulnerabilities exist in the command line interface (CLI) service accessed by the PAPI protocol of AOS-8 and AOS-10 Operating Systems. Successful exploitation of these vulnerabilities could allow an authenticated remote attacker to execute arbitrary commands on the underlying operating system."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 7.2,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "HIGH",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-05-12T19:16:36.732Z",
            "orgId": "eb103674-0d28-4225-80f8-39fb86215de0",
            "shortName": "hpe"
          },
          "references": [
            {
              "url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05048en_us\u0026docLocale=en_US"
            }
          ],
          "source": {
            "advisory": "HPESBNW05048",
            "discovery": "INTERNAL"
          },
          "title": "Authenticated Command Injection Vulnerabilities in Command Line Interface (CLI) Service Accessed by PAPI Protocol of AOS-8 and AOS-10 Operating Systems",
          "x_generator": {
            "engine": "Vulnogram 0.2.0"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "eb103674-0d28-4225-80f8-39fb86215de0",
        "assignerShortName": "hpe",
        "cveId": "CVE-2026-44870",
        "datePublished": "2026-05-12T19:16:36.732Z",
        "dateReserved": "2026-05-07T21:29:07.697Z",
        "dateUpdated": "2026-05-13T15:52:39.148Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-44869 (GCVE-0-2026-44869)

    Vulnerability from cvelistv5 – Published: 2026-05-12 19:15 – Updated: 2026-05-13 14:31
    VLAI
    Title
    Authenticated Command Injection Vulnerabilities in the Web-Based Management Interface of AOS-8 and AOS-10
    Summary
    Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Successful exploitation of these vulnerabilities could allow an authenticated remote attacker to execute arbitrary commands on the underlying operating system.
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-77 - Improper Neutralization of Special Elements used in a Command ('Command Injection')
    Assigner
    hpe
    Impacted products
    Vendor Product Version
    Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS) Affected: 8.13.0.0 , ≤ 8.13.1.1 (semver)
    Affected: 8.12.0.0 , ≤ 8.12.0.6 (semver)
    Affected: 8.10.0.0 , ≤ 8.10.0.21 (semver)
    Affected: 10.7.0.0 , ≤ 10.7.2.2 (semver)
    Affected: 10.8.0.0 (semver)
    Affected: 10.4.0.0 , ≤ 10.4.1.10 (semver)
    Create a notification for this product.
    Credits
    zzcentury
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-44869",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-05-13T12:36:33.096470Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "problemTypes": [
              {
                "descriptions": [
                  {
                    "cweId": "CWE-77",
                    "description": "CWE-77 Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)",
                    "lang": "en",
                    "type": "CWE"
                  }
                ]
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-05-13T14:31:32.668Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "affected",
              "product": "HPE Aruba Networking Wireless Operating System (AOS)",
              "vendor": "Hewlett Packard Enterprise (HPE)",
              "versions": [
                {
                  "lessThanOrEqual": "8.13.1.1",
                  "status": "affected",
                  "version": "8.13.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "8.12.0.6",
                  "status": "affected",
                  "version": "8.12.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "8.10.0.21",
                  "status": "affected",
                  "version": "8.10.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.7.2.2",
                  "status": "affected",
                  "version": "10.7.0.0",
                  "versionType": "semver"
                },
                {
                  "status": "affected",
                  "version": "10.8.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.4.1.10",
                  "status": "affected",
                  "version": "10.4.0.0",
                  "versionType": "semver"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "reporter",
              "value": "zzcentury"
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "\u003cp\u003eCommand injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Successful exploitation of these vulnerabilities could allow an authenticated remote attacker to execute arbitrary commands on the underlying operating system.\u003c/p\u003e"
                }
              ],
              "value": "Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Successful exploitation of these vulnerabilities could allow an authenticated remote attacker to execute arbitrary commands on the underlying operating system."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 7.2,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "HIGH",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-05-12T19:15:50.763Z",
            "orgId": "eb103674-0d28-4225-80f8-39fb86215de0",
            "shortName": "hpe"
          },
          "references": [
            {
              "url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05048en_us\u0026docLocale=en_US"
            }
          ],
          "source": {
            "advisory": "HPESBNW05048",
            "discovery": "INTERNAL"
          },
          "title": "Authenticated Command Injection Vulnerabilities in the Web-Based Management Interface of AOS-8 and AOS-10",
          "x_generator": {
            "engine": "Vulnogram 0.2.0"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "eb103674-0d28-4225-80f8-39fb86215de0",
        "assignerShortName": "hpe",
        "cveId": "CVE-2026-44869",
        "datePublished": "2026-05-12T19:15:50.763Z",
        "dateReserved": "2026-05-07T21:29:07.697Z",
        "dateUpdated": "2026-05-13T14:31:32.668Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-44868 (GCVE-0-2026-44868)

    Vulnerability from cvelistv5 – Published: 2026-05-12 19:15 – Updated: 2026-05-14 12:28
    VLAI
    Title
    Authenticated Command Injection Vulnerabilities in the Web-Based Management Interface of AOS-8 and AOS-10
    Summary
    Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Successful exploitation of these vulnerabilities could allow an authenticated remote attacker to execute arbitrary commands on the underlying operating system.
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-77 - Improper Neutralization of Special Elements used in a Command ('Command Injection')
    Assigner
    hpe
    Impacted products
    Vendor Product Version
    Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS) Affected: 8.13.0.0 , ≤ 8.13.1.1 (semver)
    Affected: 8.12.0.0 , ≤ 8.12.0.6 (semver)
    Affected: 8.10.0.0 , ≤ 8.10.0.21 (semver)
    Affected: 10.7.0.0 , ≤ 10.7.2.2 (semver)
    Affected: 10.8.0.0 (semver)
    Affected: 10.4.0.0 , ≤ 10.4.1.10 (semver)
    Create a notification for this product.
    Credits
    zzcentury
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-44868",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-05-14T12:28:48.306849Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "problemTypes": [
              {
                "descriptions": [
                  {
                    "cweId": "CWE-77",
                    "description": "CWE-77 Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)",
                    "lang": "en",
                    "type": "CWE"
                  }
                ]
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-05-14T12:28:51.490Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "affected",
              "product": "HPE Aruba Networking Wireless Operating System (AOS)",
              "vendor": "Hewlett Packard Enterprise (HPE)",
              "versions": [
                {
                  "lessThanOrEqual": "8.13.1.1",
                  "status": "affected",
                  "version": "8.13.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "8.12.0.6",
                  "status": "affected",
                  "version": "8.12.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "8.10.0.21",
                  "status": "affected",
                  "version": "8.10.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.7.2.2",
                  "status": "affected",
                  "version": "10.7.0.0",
                  "versionType": "semver"
                },
                {
                  "status": "affected",
                  "version": "10.8.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.4.1.10",
                  "status": "affected",
                  "version": "10.4.0.0",
                  "versionType": "semver"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "reporter",
              "value": "zzcentury"
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "\u003cp\u003eCommand injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Successful exploitation of these vulnerabilities could allow an authenticated remote attacker to execute arbitrary commands on the underlying operating system.\u003c/p\u003e"
                }
              ],
              "value": "Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Successful exploitation of these vulnerabilities could allow an authenticated remote attacker to execute arbitrary commands on the underlying operating system."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 7.2,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "HIGH",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-05-12T19:15:05.027Z",
            "orgId": "eb103674-0d28-4225-80f8-39fb86215de0",
            "shortName": "hpe"
          },
          "references": [
            {
              "url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05048en_us\u0026docLocale=en_US"
            }
          ],
          "source": {
            "advisory": "HPESBNW05048",
            "discovery": "INTERNAL"
          },
          "title": "Authenticated Command Injection Vulnerabilities in the Web-Based Management Interface of AOS-8 and AOS-10",
          "x_generator": {
            "engine": "Vulnogram 0.2.0"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "eb103674-0d28-4225-80f8-39fb86215de0",
        "assignerShortName": "hpe",
        "cveId": "CVE-2026-44868",
        "datePublished": "2026-05-12T19:15:05.027Z",
        "dateReserved": "2026-05-07T21:29:07.697Z",
        "dateUpdated": "2026-05-14T12:28:51.490Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-44867 (GCVE-0-2026-44867)

    Vulnerability from cvelistv5 – Published: 2026-05-12 19:13 – Updated: 2026-05-14 12:28
    VLAI
    Title
    Authenticated Command Injection Vulnerabilities in the Web-Based Management Interface of AOS-8 and AOS-10
    Summary
    Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Successful exploitation of these vulnerabilities could allow an authenticated remote attacker to execute arbitrary commands on the underlying operating system.
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-77 - Improper Neutralization of Special Elements used in a Command ('Command Injection')
    Assigner
    hpe
    Impacted products
    Vendor Product Version
    Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS) Affected: 8.13.0.0 , ≤ 8.13.1.1 (semver)
    Affected: 8.12.0.0 , ≤ 8.12.0.6 (semver)
    Affected: 8.10.0.0 , ≤ 8.10.0.21 (semver)
    Affected: 10.7.0.0 , ≤ 10.7.2.2 (semver)
    Affected: 10.8.0.0 (semver)
    Affected: 10.4.0.0 , ≤ 10.4.1.10 (semver)
    Create a notification for this product.
    Credits
    zzcentury
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-44867",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-05-14T12:27:57.803964Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "problemTypes": [
              {
                "descriptions": [
                  {
                    "cweId": "CWE-77",
                    "description": "CWE-77 Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)",
                    "lang": "en",
                    "type": "CWE"
                  }
                ]
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-05-14T12:28:01.656Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "affected",
              "product": "HPE Aruba Networking Wireless Operating System (AOS)",
              "vendor": "Hewlett Packard Enterprise (HPE)",
              "versions": [
                {
                  "lessThanOrEqual": "8.13.1.1",
                  "status": "affected",
                  "version": "8.13.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "8.12.0.6",
                  "status": "affected",
                  "version": "8.12.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "8.10.0.21",
                  "status": "affected",
                  "version": "8.10.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.7.2.2",
                  "status": "affected",
                  "version": "10.7.0.0",
                  "versionType": "semver"
                },
                {
                  "status": "affected",
                  "version": "10.8.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.4.1.10",
                  "status": "affected",
                  "version": "10.4.0.0",
                  "versionType": "semver"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "reporter",
              "value": "zzcentury"
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "\u003cp\u003eCommand injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Successful exploitation of these vulnerabilities could allow an authenticated remote attacker to execute arbitrary commands on the underlying operating system.\u003c/p\u003e"
                }
              ],
              "value": "Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Successful exploitation of these vulnerabilities could allow an authenticated remote attacker to execute arbitrary commands on the underlying operating system."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 7.2,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "HIGH",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-05-12T19:13:41.797Z",
            "orgId": "eb103674-0d28-4225-80f8-39fb86215de0",
            "shortName": "hpe"
          },
          "references": [
            {
              "url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05048en_us\u0026docLocale=en_US"
            }
          ],
          "source": {
            "advisory": "HPESBNW05048",
            "discovery": "INTERNAL"
          },
          "title": "Authenticated Command Injection Vulnerabilities in the Web-Based Management Interface of AOS-8 and AOS-10",
          "x_generator": {
            "engine": "Vulnogram 0.2.0"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "eb103674-0d28-4225-80f8-39fb86215de0",
        "assignerShortName": "hpe",
        "cveId": "CVE-2026-44867",
        "datePublished": "2026-05-12T19:13:41.797Z",
        "dateReserved": "2026-05-07T21:29:07.697Z",
        "dateUpdated": "2026-05-14T12:28:01.656Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-44866 (GCVE-0-2026-44866)

    Vulnerability from cvelistv5 – Published: 2026-05-12 19:12 – Updated: 2026-05-13 14:18
    VLAI
    Title
    Authenticated Command Injection Vulnerabilities in the Web-Based Management Interface of AOS-8 and AOS-10
    Summary
    Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Successful exploitation of these vulnerabilities could allow an authenticated remote attacker to execute arbitrary commands on the underlying operating system.
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-77 - Improper Neutralization of Special Elements used in a Command ('Command Injection')
    Assigner
    hpe
    Impacted products
    Vendor Product Version
    Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS) Affected: 8.13.0.0 , ≤ 8.13.1.1 (semver)
    Affected: 8.12.0.0 , ≤ 8.12.0.6 (semver)
    Affected: 8.10.0.0 , ≤ 8.10.0.21 (semver)
    Affected: 10.7.0.0 , ≤ 10.7.2.2 (semver)
    Affected: 10.8.0.0 (semver)
    Affected: 10.4.0.0 , ≤ 10.4.1.10 (semver)
    Create a notification for this product.
    Credits
    moonv
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-44866",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-05-13T14:18:35.300735Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "problemTypes": [
              {
                "descriptions": [
                  {
                    "cweId": "CWE-77",
                    "description": "CWE-77 Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)",
                    "lang": "en",
                    "type": "CWE"
                  }
                ]
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-05-13T14:18:58.399Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "affected",
              "product": "HPE Aruba Networking Wireless Operating System (AOS)",
              "vendor": "Hewlett Packard Enterprise (HPE)",
              "versions": [
                {
                  "lessThanOrEqual": "8.13.1.1",
                  "status": "affected",
                  "version": "8.13.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "8.12.0.6",
                  "status": "affected",
                  "version": "8.12.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "8.10.0.21",
                  "status": "affected",
                  "version": "8.10.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.7.2.2",
                  "status": "affected",
                  "version": "10.7.0.0",
                  "versionType": "semver"
                },
                {
                  "status": "affected",
                  "version": "10.8.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.4.1.10",
                  "status": "affected",
                  "version": "10.4.0.0",
                  "versionType": "semver"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "reporter",
              "value": "moonv"
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "\u003cp\u003eCommand injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Successful exploitation of these vulnerabilities could allow an authenticated remote attacker to execute arbitrary commands on the underlying operating system.\u003c/p\u003e"
                }
              ],
              "value": "Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Successful exploitation of these vulnerabilities could allow an authenticated remote attacker to execute arbitrary commands on the underlying operating system."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 7.2,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "HIGH",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-05-12T19:12:47.890Z",
            "orgId": "eb103674-0d28-4225-80f8-39fb86215de0",
            "shortName": "hpe"
          },
          "references": [
            {
              "url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05048en_us\u0026docLocale=en_US"
            }
          ],
          "source": {
            "advisory": "HPESBNW05048",
            "discovery": "INTERNAL"
          },
          "title": "Authenticated Command Injection Vulnerabilities in the Web-Based Management Interface of AOS-8 and AOS-10",
          "x_generator": {
            "engine": "Vulnogram 0.2.0"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "eb103674-0d28-4225-80f8-39fb86215de0",
        "assignerShortName": "hpe",
        "cveId": "CVE-2026-44866",
        "datePublished": "2026-05-12T19:12:47.890Z",
        "dateReserved": "2026-05-07T21:29:07.697Z",
        "dateUpdated": "2026-05-13T14:18:58.399Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-44865 (GCVE-0-2026-44865)

    Vulnerability from cvelistv5 – Published: 2026-05-12 19:12 – Updated: 2026-05-13 17:51
    VLAI
    Title
    Authenticated Command Injection Vulnerabilities in the Web-Based Management Interface of AOS-8 and AOS-10
    Summary
    Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Successful exploitation of these vulnerabilities could allow an authenticated remote attacker to execute arbitrary commands on the underlying operating system.
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-77 - Improper Neutralization of Special Elements used in a Command ('Command Injection')
    Assigner
    hpe
    Impacted products
    Vendor Product Version
    Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS) Affected: 8.13.0.0 , ≤ 8.13.1.1 (semver)
    Affected: 8.12.0.0 , ≤ 8.12.0.6 (semver)
    Affected: 8.10.0.0 , ≤ 8.10.0.21 (semver)
    Affected: 10.7.0.0 , ≤ 10.7.2.2 (semver)
    Affected: 10.8.0.0 (semver)
    Affected: 10.4.0.0 , ≤ 10.4.1.10 (semver)
    Create a notification for this product.
    Credits
    moonv
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-44865",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-05-13T17:51:36.298755Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "problemTypes": [
              {
                "descriptions": [
                  {
                    "cweId": "CWE-77",
                    "description": "CWE-77 Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)",
                    "lang": "en",
                    "type": "CWE"
                  }
                ]
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-05-13T17:51:52.118Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "affected",
              "product": "HPE Aruba Networking Wireless Operating System (AOS)",
              "vendor": "Hewlett Packard Enterprise (HPE)",
              "versions": [
                {
                  "lessThanOrEqual": "8.13.1.1",
                  "status": "affected",
                  "version": "8.13.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "8.12.0.6",
                  "status": "affected",
                  "version": "8.12.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "8.10.0.21",
                  "status": "affected",
                  "version": "8.10.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.7.2.2",
                  "status": "affected",
                  "version": "10.7.0.0",
                  "versionType": "semver"
                },
                {
                  "status": "affected",
                  "version": "10.8.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.4.1.10",
                  "status": "affected",
                  "version": "10.4.0.0",
                  "versionType": "semver"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "reporter",
              "value": "moonv"
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "\u003cp\u003eCommand injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Successful exploitation of these vulnerabilities could allow an authenticated remote attacker to execute arbitrary commands on the underlying operating system.\u003c/p\u003e"
                }
              ],
              "value": "Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Successful exploitation of these vulnerabilities could allow an authenticated remote attacker to execute arbitrary commands on the underlying operating system."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 7.2,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "HIGH",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-05-12T19:12:00.613Z",
            "orgId": "eb103674-0d28-4225-80f8-39fb86215de0",
            "shortName": "hpe"
          },
          "references": [
            {
              "url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05048en_us\u0026docLocale=en_US"
            }
          ],
          "source": {
            "advisory": "HPESBNW05048",
            "discovery": "INTERNAL"
          },
          "title": "Authenticated Command Injection Vulnerabilities in the Web-Based Management Interface of AOS-8 and AOS-10",
          "x_generator": {
            "engine": "Vulnogram 0.2.0"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "eb103674-0d28-4225-80f8-39fb86215de0",
        "assignerShortName": "hpe",
        "cveId": "CVE-2026-44865",
        "datePublished": "2026-05-12T19:12:00.613Z",
        "dateReserved": "2026-05-07T21:29:07.697Z",
        "dateUpdated": "2026-05-13T17:51:52.118Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-44864 (GCVE-0-2026-44864)

    Vulnerability from cvelistv5 – Published: 2026-05-12 19:11 – Updated: 2026-05-13 17:52
    VLAI
    Title
    Authenticated Remote Code Execution via SQL Injection in AOS-8 and AOS-10 Operating Systems
    Summary
    SQL injection vulnerabilities exist in several underlying service components accessible through the AOS-8 and AOS-10 command-line interface and management protocol. An authenticated attacker with administrative privileges could exploit these vulnerabilities by injecting crafted input into parameters that are passed unsanitized to backend database queries. Successful exploitation could allow the attacker to execute arbitrary commands on the underlying operating system.
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
    Assigner
    hpe
    Impacted products
    Vendor Product Version
    Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS) Affected: 8.13.0.0 , ≤ 8.13.1.1 (semver)
    Affected: 8.12.0.0 , ≤ 8.12.0.6 (semver)
    Affected: 8.10.0.0 , ≤ 8.10.0.21 (semver)
    Affected: 10.7.0.0 , ≤ 10.7.2.2 (semver)
    Affected: 10.8.0.0 (semver)
    Affected: 10.4.0.0 , ≤ 10.4.1.10 (semver)
    Create a notification for this product.
    Credits
    zzcentury
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-44864",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-05-13T17:52:07.035233Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "problemTypes": [
              {
                "descriptions": [
                  {
                    "cweId": "CWE-89",
                    "description": "CWE-89 Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)",
                    "lang": "en",
                    "type": "CWE"
                  }
                ]
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-05-13T17:52:21.729Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "affected",
              "product": "HPE Aruba Networking Wireless Operating System (AOS)",
              "vendor": "Hewlett Packard Enterprise (HPE)",
              "versions": [
                {
                  "lessThanOrEqual": "8.13.1.1",
                  "status": "affected",
                  "version": "8.13.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "8.12.0.6",
                  "status": "affected",
                  "version": "8.12.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "8.10.0.21",
                  "status": "affected",
                  "version": "8.10.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.7.2.2",
                  "status": "affected",
                  "version": "10.7.0.0",
                  "versionType": "semver"
                },
                {
                  "status": "affected",
                  "version": "10.8.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.4.1.10",
                  "status": "affected",
                  "version": "10.4.0.0",
                  "versionType": "semver"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "reporter",
              "value": "zzcentury"
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "\u003cp\u003eSQL injection vulnerabilities exist in several underlying service components accessible through the AOS-8 and AOS-10 command-line interface and management protocol. An authenticated attacker with administrative privileges could exploit these vulnerabilities by injecting crafted input into parameters that are passed unsanitized to backend database queries. Successful exploitation could allow the attacker to execute arbitrary commands on the underlying operating system.\u003c/p\u003e"
                }
              ],
              "value": "SQL injection vulnerabilities exist in several underlying service components accessible through the AOS-8 and AOS-10 command-line interface and management protocol. An authenticated attacker with administrative privileges could exploit these vulnerabilities by injecting crafted input into parameters that are passed unsanitized to backend database queries. Successful exploitation could allow the attacker to execute arbitrary commands on the underlying operating system."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 7.2,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "HIGH",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-05-12T19:11:09.840Z",
            "orgId": "eb103674-0d28-4225-80f8-39fb86215de0",
            "shortName": "hpe"
          },
          "references": [
            {
              "url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05048en_us\u0026docLocale=en_US"
            }
          ],
          "source": {
            "advisory": "HPESBNW05048",
            "discovery": "INTERNAL"
          },
          "title": "Authenticated Remote Code Execution via SQL Injection in AOS-8 and AOS-10 Operating Systems",
          "x_generator": {
            "engine": "Vulnogram 0.2.0"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "eb103674-0d28-4225-80f8-39fb86215de0",
        "assignerShortName": "hpe",
        "cveId": "CVE-2026-44864",
        "datePublished": "2026-05-12T19:11:09.840Z",
        "dateReserved": "2026-05-07T21:29:07.696Z",
        "dateUpdated": "2026-05-13T17:52:21.729Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-44863 (GCVE-0-2026-44863)

    Vulnerability from cvelistv5 – Published: 2026-05-12 19:09 – Updated: 2026-05-13 17:52
    VLAI
    Title
    Authenticated Remote Code Execution via SQL Injection in AOS-8 and AOS-10 Operating Systems
    Summary
    SQL injection vulnerabilities exist in several underlying service components accessible through the AOS-8 and AOS-10 command-line interface and management protocol. An authenticated attacker with administrative privileges could exploit these vulnerabilities by injecting crafted input into parameters that are passed unsanitized to backend database queries. Successful exploitation could allow the attacker to execute arbitrary commands on the underlying operating system.
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
    Assigner
    hpe
    Impacted products
    Vendor Product Version
    Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS) Affected: 8.13.0.0 , ≤ 8.13.1.1 (semver)
    Affected: 8.12.0.0 , ≤ 8.12.0.6 (semver)
    Affected: 8.10.0.0 , ≤ 8.10.0.21 (semver)
    Affected: 10.7.0.0 , ≤ 10.7.2.2 (semver)
    Affected: 10.8.0.0 (semver)
    Affected: 10.4.0.0 , ≤ 10.4.1.10 (semver)
    Create a notification for this product.
    Credits
    zzcentury
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-44863",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-05-13T17:52:43.405659Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "problemTypes": [
              {
                "descriptions": [
                  {
                    "cweId": "CWE-89",
                    "description": "CWE-89 Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)",
                    "lang": "en",
                    "type": "CWE"
                  }
                ]
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-05-13T17:52:56.389Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "affected",
              "product": "HPE Aruba Networking Wireless Operating System (AOS)",
              "vendor": "Hewlett Packard Enterprise (HPE)",
              "versions": [
                {
                  "lessThanOrEqual": "8.13.1.1",
                  "status": "affected",
                  "version": "8.13.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "8.12.0.6",
                  "status": "affected",
                  "version": "8.12.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "8.10.0.21",
                  "status": "affected",
                  "version": "8.10.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.7.2.2",
                  "status": "affected",
                  "version": "10.7.0.0",
                  "versionType": "semver"
                },
                {
                  "status": "affected",
                  "version": "10.8.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.4.1.10",
                  "status": "affected",
                  "version": "10.4.0.0",
                  "versionType": "semver"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "reporter",
              "value": "zzcentury"
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "\u003cp\u003eSQL injection vulnerabilities exist in several underlying service components accessible through the AOS-8 and AOS-10 command-line interface and management protocol. An authenticated attacker with administrative privileges could exploit these vulnerabilities by injecting crafted input into parameters that are passed unsanitized to backend database queries. Successful exploitation could allow the attacker to execute arbitrary commands on the underlying operating system.\u003c/p\u003e"
                }
              ],
              "value": "SQL injection vulnerabilities exist in several underlying service components accessible through the AOS-8 and AOS-10 command-line interface and management protocol. An authenticated attacker with administrative privileges could exploit these vulnerabilities by injecting crafted input into parameters that are passed unsanitized to backend database queries. Successful exploitation could allow the attacker to execute arbitrary commands on the underlying operating system."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 7.2,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "HIGH",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-05-12T19:09:19.516Z",
            "orgId": "eb103674-0d28-4225-80f8-39fb86215de0",
            "shortName": "hpe"
          },
          "references": [
            {
              "url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05048en_us\u0026docLocale=en_US"
            }
          ],
          "source": {
            "advisory": "HPESBNW05048",
            "discovery": "INTERNAL"
          },
          "title": "Authenticated Remote Code Execution via SQL Injection in AOS-8 and AOS-10 Operating Systems",
          "x_generator": {
            "engine": "Vulnogram 0.2.0"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "eb103674-0d28-4225-80f8-39fb86215de0",
        "assignerShortName": "hpe",
        "cveId": "CVE-2026-44863",
        "datePublished": "2026-05-12T19:09:19.516Z",
        "dateReserved": "2026-05-07T21:29:07.696Z",
        "dateUpdated": "2026-05-13T17:52:56.389Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-44862 (GCVE-0-2026-44862)

    Vulnerability from cvelistv5 – Published: 2026-05-12 19:08 – Updated: 2026-05-13 17:56
    VLAI
    Title
    Authenticated Remote Code Execution via SQL Injection in AOS-8 and AOS-10 Operating Systems
    Summary
    SQL injection vulnerabilities exist in several underlying service components accessible through the AOS-8 and AOS-10 command-line interface and management protocol. An authenticated attacker with administrative privileges could exploit these vulnerabilities by injecting crafted input into parameters that are passed unsanitized to backend database queries. Successful exploitation could allow the attacker to execute arbitrary commands on the underlying operating system.
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
    Assigner
    hpe
    Impacted products
    Vendor Product Version
    Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS) Affected: 8.13.0.0 , ≤ 8.13.1.1 (semver)
    Affected: 8.12.0.0 , ≤ 8.12.0.6 (semver)
    Affected: 8.10.0.0 , ≤ 8.10.0.21 (semver)
    Affected: 10.7.0.0 , ≤ 10.7.2.2 (semver)
    Affected: 10.8.0.0 (semver)
    Affected: 10.4.0.0 , ≤ 10.4.1.10 (semver)
    Create a notification for this product.
    Credits
    zzcentury
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-44862",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-05-13T17:55:35.526849Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "problemTypes": [
              {
                "descriptions": [
                  {
                    "cweId": "CWE-89",
                    "description": "CWE-89 Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)",
                    "lang": "en",
                    "type": "CWE"
                  }
                ]
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-05-13T17:56:05.871Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "affected",
              "product": "HPE Aruba Networking Wireless Operating System (AOS)",
              "vendor": "Hewlett Packard Enterprise (HPE)",
              "versions": [
                {
                  "lessThanOrEqual": "8.13.1.1",
                  "status": "affected",
                  "version": "8.13.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "8.12.0.6",
                  "status": "affected",
                  "version": "8.12.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "8.10.0.21",
                  "status": "affected",
                  "version": "8.10.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.7.2.2",
                  "status": "affected",
                  "version": "10.7.0.0",
                  "versionType": "semver"
                },
                {
                  "status": "affected",
                  "version": "10.8.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.4.1.10",
                  "status": "affected",
                  "version": "10.4.0.0",
                  "versionType": "semver"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "reporter",
              "value": "zzcentury"
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "\u003cp\u003eSQL injection vulnerabilities exist in several underlying service components accessible through the AOS-8 and AOS-10 command-line interface and management protocol. An authenticated attacker with administrative privileges could exploit these vulnerabilities by injecting crafted input into parameters that are passed unsanitized to backend database queries. Successful exploitation could allow the attacker to execute arbitrary commands on the underlying operating system.\u003c/p\u003e"
                }
              ],
              "value": "SQL injection vulnerabilities exist in several underlying service components accessible through the AOS-8 and AOS-10 command-line interface and management protocol. An authenticated attacker with administrative privileges could exploit these vulnerabilities by injecting crafted input into parameters that are passed unsanitized to backend database queries. Successful exploitation could allow the attacker to execute arbitrary commands on the underlying operating system."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 7.2,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "HIGH",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-05-12T19:08:40.569Z",
            "orgId": "eb103674-0d28-4225-80f8-39fb86215de0",
            "shortName": "hpe"
          },
          "references": [
            {
              "url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05048en_us\u0026docLocale=en_US"
            }
          ],
          "source": {
            "advisory": "HPESBNW05048",
            "discovery": "INTERNAL"
          },
          "title": "Authenticated Remote Code Execution via SQL Injection in AOS-8 and AOS-10 Operating Systems",
          "x_generator": {
            "engine": "Vulnogram 0.2.0"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "eb103674-0d28-4225-80f8-39fb86215de0",
        "assignerShortName": "hpe",
        "cveId": "CVE-2026-44862",
        "datePublished": "2026-05-12T19:08:16.219Z",
        "dateReserved": "2026-05-07T21:29:07.696Z",
        "dateUpdated": "2026-05-13T17:56:05.871Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-44861 (GCVE-0-2026-44861)

    Vulnerability from cvelistv5 – Published: 2026-05-12 19:06 – Updated: 2026-05-13 17:58
    VLAI
    Title
    Authenticated Remote Code Execution via SQL Injection in AOS-8 and AOS-10 Operating Systems
    Summary
    SQL injection vulnerabilities exist in several underlying service components accessible through the AOS-8 and AOS-10 command-line interface and management protocol. An authenticated attacker with administrative privileges could exploit these vulnerabilities by injecting crafted input into parameters that are passed unsanitized to backend database queries. Successful exploitation could allow the attacker to execute arbitrary commands on the underlying operating system.
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
    Assigner
    hpe
    Impacted products
    Vendor Product Version
    Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS) Affected: 8.13.0.0 , ≤ 8.13.1.1 (semver)
    Affected: 8.12.0.0 , ≤ 8.12.0.6 (semver)
    Affected: 8.10.0.0 , ≤ 8.10.0.21 (semver)
    Affected: 10.7.0.0 , ≤ 10.7.2.2 (semver)
    Affected: 10.8.0.0 (semver)
    Affected: 10.4.0.0 , ≤ 10.4.1.10 (semver)
    Create a notification for this product.
    Credits
    zzcentury
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-44861",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-05-13T17:58:00.302996Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "problemTypes": [
              {
                "descriptions": [
                  {
                    "cweId": "CWE-89",
                    "description": "CWE-89 Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)",
                    "lang": "en",
                    "type": "CWE"
                  }
                ]
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-05-13T17:58:29.693Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "affected",
              "product": "HPE Aruba Networking Wireless Operating System (AOS)",
              "vendor": "Hewlett Packard Enterprise (HPE)",
              "versions": [
                {
                  "lessThanOrEqual": "8.13.1.1",
                  "status": "affected",
                  "version": "8.13.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "8.12.0.6",
                  "status": "affected",
                  "version": "8.12.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "8.10.0.21",
                  "status": "affected",
                  "version": "8.10.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.7.2.2",
                  "status": "affected",
                  "version": "10.7.0.0",
                  "versionType": "semver"
                },
                {
                  "status": "affected",
                  "version": "10.8.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.4.1.10",
                  "status": "affected",
                  "version": "10.4.0.0",
                  "versionType": "semver"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "reporter",
              "value": "zzcentury"
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "\u003cp\u003eSQL injection vulnerabilities exist in several underlying service components accessible through the AOS-8 and AOS-10 command-line interface and management protocol. An authenticated attacker with administrative privileges could exploit these vulnerabilities by injecting crafted input into parameters that are passed unsanitized to backend database queries. Successful exploitation could allow the attacker to execute arbitrary commands on the underlying operating system.\u003c/p\u003e"
                }
              ],
              "value": "SQL injection vulnerabilities exist in several underlying service components accessible through the AOS-8 and AOS-10 command-line interface and management protocol. An authenticated attacker with administrative privileges could exploit these vulnerabilities by injecting crafted input into parameters that are passed unsanitized to backend database queries. Successful exploitation could allow the attacker to execute arbitrary commands on the underlying operating system."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 7.2,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "HIGH",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-05-12T19:07:07.251Z",
            "orgId": "eb103674-0d28-4225-80f8-39fb86215de0",
            "shortName": "hpe"
          },
          "references": [
            {
              "url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05048en_us\u0026docLocale=en_US"
            }
          ],
          "source": {
            "advisory": "HPESBNW05048",
            "discovery": "INTERNAL"
          },
          "title": "Authenticated Remote Code Execution via SQL Injection in AOS-8 and AOS-10 Operating Systems",
          "x_generator": {
            "engine": "Vulnogram 0.2.0"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "eb103674-0d28-4225-80f8-39fb86215de0",
        "assignerShortName": "hpe",
        "cveId": "CVE-2026-44861",
        "datePublished": "2026-05-12T19:06:35.878Z",
        "dateReserved": "2026-05-07T21:29:07.696Z",
        "dateUpdated": "2026-05-13T17:58:29.693Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-44860 (GCVE-0-2026-44860)

    Vulnerability from cvelistv5 – Published: 2026-05-12 19:05 – Updated: 2026-05-13 17:57
    VLAI
    Title
    Authenticated Remote Code Execution via SQL Injection in AOS-8 and AOS-10 Operating Systems
    Summary
    SQL injection vulnerabilities exist in several underlying service components accessible through the AOS-8 and AOS-10 command-line interface and management protocol. An authenticated attacker with administrative privileges could exploit these vulnerabilities by injecting crafted input into parameters that are passed unsanitized to backend database queries. Successful exploitation could allow the attacker to execute arbitrary commands on the underlying operating system.
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
    Assigner
    hpe
    Impacted products
    Vendor Product Version
    Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS) Affected: 8.13.0.0 , ≤ 8.13.1.1 (semver)
    Affected: 8.12.0.0 , ≤ 8.12.0.6 (semver)
    Affected: 8.10.0.0 , ≤ 8.10.0.21 (semver)
    Affected: 10.7.0.0 , ≤ 10.7.2.2 (semver)
    Affected: 10.8.0.0 (semver)
    Affected: 10.4.0.0 , ≤ 10.4.1.10 (semver)
    Create a notification for this product.
    Credits
    zzcentury
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-44860",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-05-13T17:57:14.715835Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "problemTypes": [
              {
                "descriptions": [
                  {
                    "cweId": "CWE-89",
                    "description": "CWE-89 Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)",
                    "lang": "en",
                    "type": "CWE"
                  }
                ]
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-05-13T17:57:40.202Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "affected",
              "product": "HPE Aruba Networking Wireless Operating System (AOS)",
              "vendor": "Hewlett Packard Enterprise (HPE)",
              "versions": [
                {
                  "lessThanOrEqual": "8.13.1.1",
                  "status": "affected",
                  "version": "8.13.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "8.12.0.6",
                  "status": "affected",
                  "version": "8.12.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "8.10.0.21",
                  "status": "affected",
                  "version": "8.10.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.7.2.2",
                  "status": "affected",
                  "version": "10.7.0.0",
                  "versionType": "semver"
                },
                {
                  "status": "affected",
                  "version": "10.8.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.4.1.10",
                  "status": "affected",
                  "version": "10.4.0.0",
                  "versionType": "semver"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "reporter",
              "value": "zzcentury"
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "\u003cp\u003eSQL injection vulnerabilities exist in several underlying service components accessible through the AOS-8 and AOS-10 command-line interface and management protocol. An authenticated attacker with administrative privileges could exploit these vulnerabilities by injecting crafted input into parameters that are passed unsanitized to backend database queries. Successful exploitation could allow the attacker to execute arbitrary commands on the underlying operating system.\u003c/p\u003e"
                }
              ],
              "value": "SQL injection vulnerabilities exist in several underlying service components accessible through the AOS-8 and AOS-10 command-line interface and management protocol. An authenticated attacker with administrative privileges could exploit these vulnerabilities by injecting crafted input into parameters that are passed unsanitized to backend database queries. Successful exploitation could allow the attacker to execute arbitrary commands on the underlying operating system."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 7.2,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "HIGH",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-05-12T19:05:21.357Z",
            "orgId": "eb103674-0d28-4225-80f8-39fb86215de0",
            "shortName": "hpe"
          },
          "references": [
            {
              "url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05048en_us\u0026docLocale=en_US"
            }
          ],
          "source": {
            "advisory": "HPESBNW05048",
            "discovery": "INTERNAL"
          },
          "title": "Authenticated Remote Code Execution via SQL Injection in AOS-8 and AOS-10 Operating Systems",
          "x_generator": {
            "engine": "Vulnogram 0.2.0"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "eb103674-0d28-4225-80f8-39fb86215de0",
        "assignerShortName": "hpe",
        "cveId": "CVE-2026-44860",
        "datePublished": "2026-05-12T19:05:21.357Z",
        "dateReserved": "2026-05-07T21:29:03.734Z",
        "dateUpdated": "2026-05-13T17:57:40.202Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-44859 (GCVE-0-2026-44859)

    Vulnerability from cvelistv5 – Published: 2026-05-12 19:04 – Updated: 2026-05-13 17:59
    VLAI
    Title
    Authenticated Stack-Based Buffer Overflow in PAPI Services
    Summary
    Stack-based buffer overflow vulnerabilities exist in several underlying management service components accessed through the command-line interface of the AOS-8 and AOS-10 Operating Systems. An authenticated attacker with administrative privileges could exploit these vulnerabilities by sending specially crafted requests to the affected services. Successful exploitation could allow the attacker to execute arbitrary code with elevated privileges on the underlying operating system.
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-121 - Stack-based Buffer Overflow
    Assigner
    hpe
    Impacted products
    Vendor Product Version
    Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS) Affected: 8.13.0.0 , ≤ 8.13.1.1 (semver)
    Affected: 8.12.0.0 , ≤ 8.12.0.6 (semver)
    Affected: 8.10.0.0 , ≤ 8.10.0.21 (semver)
    Affected: 10.7.0.0 , ≤ 10.7.2.2 (semver)
    Affected: 10.8.0.0 (semver)
    Affected: 10.4.0.0 , ≤ 10.4.1.10 (semver)
    Create a notification for this product.
    Credits
    zzcentury
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-44859",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-05-13T17:59:07.623243Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "problemTypes": [
              {
                "descriptions": [
                  {
                    "cweId": "CWE-121",
                    "description": "CWE-121 Stack-based Buffer Overflow",
                    "lang": "en",
                    "type": "CWE"
                  }
                ]
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-05-13T17:59:27.799Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "affected",
              "product": "HPE Aruba Networking Wireless Operating System (AOS)",
              "vendor": "Hewlett Packard Enterprise (HPE)",
              "versions": [
                {
                  "lessThanOrEqual": "8.13.1.1",
                  "status": "affected",
                  "version": "8.13.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "8.12.0.6",
                  "status": "affected",
                  "version": "8.12.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "8.10.0.21",
                  "status": "affected",
                  "version": "8.10.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.7.2.2",
                  "status": "affected",
                  "version": "10.7.0.0",
                  "versionType": "semver"
                },
                {
                  "status": "affected",
                  "version": "10.8.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.4.1.10",
                  "status": "affected",
                  "version": "10.4.0.0",
                  "versionType": "semver"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "reporter",
              "value": "zzcentury"
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "\u003cp\u003eStack-based buffer overflow vulnerabilities exist in several underlying management service components accessed through the command-line interface of the AOS-8 and AOS-10 Operating Systems. An authenticated attacker with administrative privileges could exploit these vulnerabilities by sending specially crafted requests to the affected services. Successful exploitation could allow the attacker to execute arbitrary code with elevated privileges on the underlying operating system.\u003c/p\u003e"
                }
              ],
              "value": "Stack-based buffer overflow vulnerabilities exist in several underlying management service components accessed through the command-line interface of the AOS-8 and AOS-10 Operating Systems. An authenticated attacker with administrative privileges could exploit these vulnerabilities by sending specially crafted requests to the affected services. Successful exploitation could allow the attacker to execute arbitrary code with elevated privileges on the underlying operating system."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 7.2,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "HIGH",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-05-12T19:04:20.861Z",
            "orgId": "eb103674-0d28-4225-80f8-39fb86215de0",
            "shortName": "hpe"
          },
          "references": [
            {
              "url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05048en_us\u0026docLocale=en_US"
            }
          ],
          "source": {
            "advisory": "HPESBNW05048",
            "discovery": "INTERNAL"
          },
          "title": "Authenticated Stack-Based Buffer Overflow in PAPI Services",
          "x_generator": {
            "engine": "Vulnogram 0.2.0"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "eb103674-0d28-4225-80f8-39fb86215de0",
        "assignerShortName": "hpe",
        "cveId": "CVE-2026-44859",
        "datePublished": "2026-05-12T19:04:20.861Z",
        "dateReserved": "2026-05-07T21:29:03.734Z",
        "dateUpdated": "2026-05-13T17:59:27.799Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-44858 (GCVE-0-2026-44858)

    Vulnerability from cvelistv5 – Published: 2026-05-12 19:03 – Updated: 2026-05-13 18:00
    VLAI
    Title
    Authenticated Stack-Based Buffer Overflow in PAPI Services
    Summary
    Stack-based buffer overflow vulnerabilities exist in several underlying management service components accessed through the command-line interface of the AOS-8 and AOS-10 Operating Systems. An authenticated attacker with administrative privileges could exploit these vulnerabilities by sending specially crafted requests to the affected services. Successful exploitation could allow the attacker to execute arbitrary code with elevated privileges on the underlying operating system.
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-121 - Stack-based Buffer Overflow
    Assigner
    hpe
    Impacted products
    Vendor Product Version
    Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS) Affected: 8.13.0.0 , ≤ 8.13.1.1 (semver)
    Affected: 8.12.0.0 , ≤ 8.12.0.6 (semver)
    Affected: 8.10.0.0 , ≤ 8.10.0.21 (semver)
    Affected: 10.7.0.0 , ≤ 10.7.2.2 (semver)
    Affected: 10.8.0.0 (semver)
    Affected: 10.4.0.0 , ≤ 10.4.1.10 (semver)
    Create a notification for this product.
    Credits
    zzcentury
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-44858",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-05-13T17:59:44.898562Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "problemTypes": [
              {
                "descriptions": [
                  {
                    "cweId": "CWE-121",
                    "description": "CWE-121 Stack-based Buffer Overflow",
                    "lang": "en",
                    "type": "CWE"
                  }
                ]
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-05-13T18:00:18.204Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "affected",
              "product": "HPE Aruba Networking Wireless Operating System (AOS)",
              "vendor": "Hewlett Packard Enterprise (HPE)",
              "versions": [
                {
                  "lessThanOrEqual": "8.13.1.1",
                  "status": "affected",
                  "version": "8.13.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "8.12.0.6",
                  "status": "affected",
                  "version": "8.12.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "8.10.0.21",
                  "status": "affected",
                  "version": "8.10.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.7.2.2",
                  "status": "affected",
                  "version": "10.7.0.0",
                  "versionType": "semver"
                },
                {
                  "status": "affected",
                  "version": "10.8.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.4.1.10",
                  "status": "affected",
                  "version": "10.4.0.0",
                  "versionType": "semver"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "reporter",
              "value": "zzcentury"
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "\u003cp\u003eStack-based buffer overflow vulnerabilities exist in several underlying management service components accessed through the command-line interface of the AOS-8 and AOS-10 Operating Systems. An authenticated attacker with administrative privileges could exploit these vulnerabilities by sending specially crafted requests to the affected services. Successful exploitation could allow the attacker to execute arbitrary code with elevated privileges on the underlying operating system.\u003c/p\u003e"
                }
              ],
              "value": "Stack-based buffer overflow vulnerabilities exist in several underlying management service components accessed through the command-line interface of the AOS-8 and AOS-10 Operating Systems. An authenticated attacker with administrative privileges could exploit these vulnerabilities by sending specially crafted requests to the affected services. Successful exploitation could allow the attacker to execute arbitrary code with elevated privileges on the underlying operating system."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 7.2,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "HIGH",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-05-12T19:03:39.670Z",
            "orgId": "eb103674-0d28-4225-80f8-39fb86215de0",
            "shortName": "hpe"
          },
          "references": [
            {
              "url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05048en_us\u0026docLocale=en_US"
            }
          ],
          "source": {
            "advisory": "HPESBNW05048",
            "discovery": "INTERNAL"
          },
          "title": "Authenticated Stack-Based Buffer Overflow in PAPI Services",
          "x_generator": {
            "engine": "Vulnogram 0.2.0"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "eb103674-0d28-4225-80f8-39fb86215de0",
        "assignerShortName": "hpe",
        "cveId": "CVE-2026-44858",
        "datePublished": "2026-05-12T19:03:39.670Z",
        "dateReserved": "2026-05-07T21:29:03.734Z",
        "dateUpdated": "2026-05-13T18:00:18.204Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-44857 (GCVE-0-2026-44857)

    Vulnerability from cvelistv5 – Published: 2026-05-12 19:02 – Updated: 2026-05-13 18:02
    VLAI
    Title
    Authenticated Stack-Based Buffer Overflow in PAPI Services
    Summary
    Stack-based buffer overflow vulnerabilities exist in several underlying management service components accessed through the command-line interface of the AOS-8 and AOS-10 Operating Systems. An authenticated attacker with administrative privileges could exploit these vulnerabilities by sending specially crafted requests to the affected services. Successful exploitation could allow the attacker to execute arbitrary code with elevated privileges on the underlying operating system.
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-121 - Stack-based Buffer Overflow
    Assigner
    hpe
    Impacted products
    Vendor Product Version
    Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS) Affected: 8.13.0.0 , ≤ 8.13.1.1 (semver)
    Affected: 8.12.0.0 , ≤ 8.12.0.6 (semver)
    Affected: 8.10.0.0 , ≤ 8.10.0.21 (semver)
    Affected: 10.7.0.0 , ≤ 10.7.2.2 (semver)
    Affected: 10.8.0.0 (semver)
    Affected: 10.4.0.0 , ≤ 10.4.1.10 (semver)
    Create a notification for this product.
    Credits
    zzcentury
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-44857",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-05-13T18:01:48.302064Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "problemTypes": [
              {
                "descriptions": [
                  {
                    "cweId": "CWE-121",
                    "description": "CWE-121 Stack-based Buffer Overflow",
                    "lang": "en",
                    "type": "CWE"
                  }
                ]
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-05-13T18:02:04.629Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "affected",
              "product": "HPE Aruba Networking Wireless Operating System (AOS)",
              "vendor": "Hewlett Packard Enterprise (HPE)",
              "versions": [
                {
                  "lessThanOrEqual": "8.13.1.1",
                  "status": "affected",
                  "version": "8.13.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "8.12.0.6",
                  "status": "affected",
                  "version": "8.12.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "8.10.0.21",
                  "status": "affected",
                  "version": "8.10.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.7.2.2",
                  "status": "affected",
                  "version": "10.7.0.0",
                  "versionType": "semver"
                },
                {
                  "status": "affected",
                  "version": "10.8.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.4.1.10",
                  "status": "affected",
                  "version": "10.4.0.0",
                  "versionType": "semver"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "reporter",
              "value": "zzcentury"
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "\u003cp\u003eStack-based buffer overflow vulnerabilities exist in several underlying management service components accessed through the command-line interface of the AOS-8 and AOS-10 Operating Systems. An authenticated attacker with administrative privileges could exploit these vulnerabilities by sending specially crafted requests to the affected services. Successful exploitation could allow the attacker to execute arbitrary code with elevated privileges on the underlying operating system.\u003c/p\u003e"
                }
              ],
              "value": "Stack-based buffer overflow vulnerabilities exist in several underlying management service components accessed through the command-line interface of the AOS-8 and AOS-10 Operating Systems. An authenticated attacker with administrative privileges could exploit these vulnerabilities by sending specially crafted requests to the affected services. Successful exploitation could allow the attacker to execute arbitrary code with elevated privileges on the underlying operating system."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 7.2,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "HIGH",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-05-12T19:02:40.543Z",
            "orgId": "eb103674-0d28-4225-80f8-39fb86215de0",
            "shortName": "hpe"
          },
          "references": [
            {
              "url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05048en_us\u0026docLocale=en_US"
            }
          ],
          "source": {
            "advisory": "HPESBNW05048",
            "discovery": "INTERNAL"
          },
          "title": "Authenticated Stack-Based Buffer Overflow in PAPI Services",
          "x_generator": {
            "engine": "Vulnogram 0.2.0"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "eb103674-0d28-4225-80f8-39fb86215de0",
        "assignerShortName": "hpe",
        "cveId": "CVE-2026-44857",
        "datePublished": "2026-05-12T19:02:40.543Z",
        "dateReserved": "2026-05-07T21:29:03.734Z",
        "dateUpdated": "2026-05-13T18:02:04.629Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-44856 (GCVE-0-2026-44856)

    Vulnerability from cvelistv5 – Published: 2026-05-12 19:00 – Updated: 2026-05-13 17:50
    VLAI
    Title
    Authenticated Stack-Based Buffer Overflow in PAPI Services
    Summary
    Stack-based buffer overflow vulnerabilities exist in several underlying management service components accessed through the command-line interface of the AOS-8 and AOS-10 Operating Systems. An authenticated attacker with administrative privileges could exploit these vulnerabilities by sending specially crafted requests to the affected services. Successful exploitation could allow the attacker to execute arbitrary code with elevated privileges on the underlying operating system.
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-121 - Stack-based Buffer Overflow
    Assigner
    hpe
    Impacted products
    Vendor Product Version
    Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS) Affected: 8.13.0.0 , ≤ 8.13.1.1 (semver)
    Affected: 8.12.0.0 , ≤ 8.12.0.6 (semver)
    Affected: 8.10.0.0 , ≤ 8.10.0.21 (semver)
    Affected: 10.7.0.0 , ≤ 10.7.2.2 (semver)
    Affected: 10.8.0.0 (semver)
    Affected: 10.4.0.0 , ≤ 10.4.1.10 (semver)
    Create a notification for this product.
    Credits
    zzcentury
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-44856",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-05-13T17:50:13.939286Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "problemTypes": [
              {
                "descriptions": [
                  {
                    "cweId": "CWE-121",
                    "description": "CWE-121 Stack-based Buffer Overflow",
                    "lang": "en",
                    "type": "CWE"
                  }
                ]
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-05-13T17:50:31.513Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "affected",
              "product": "HPE Aruba Networking Wireless Operating System (AOS)",
              "vendor": "Hewlett Packard Enterprise (HPE)",
              "versions": [
                {
                  "lessThanOrEqual": "8.13.1.1",
                  "status": "affected",
                  "version": "8.13.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "8.12.0.6",
                  "status": "affected",
                  "version": "8.12.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "8.10.0.21",
                  "status": "affected",
                  "version": "8.10.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.7.2.2",
                  "status": "affected",
                  "version": "10.7.0.0",
                  "versionType": "semver"
                },
                {
                  "status": "affected",
                  "version": "10.8.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.4.1.10",
                  "status": "affected",
                  "version": "10.4.0.0",
                  "versionType": "semver"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "reporter",
              "value": "zzcentury"
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "\u003cp\u003eStack-based buffer overflow vulnerabilities exist in several underlying management service components accessed through the command-line interface of the AOS-8 and AOS-10 Operating Systems. An authenticated attacker with administrative privileges could exploit these vulnerabilities by sending specially crafted requests to the affected services. Successful exploitation could allow the attacker to execute arbitrary code with elevated privileges on the underlying operating system.\u003c/p\u003e"
                }
              ],
              "value": "Stack-based buffer overflow vulnerabilities exist in several underlying management service components accessed through the command-line interface of the AOS-8 and AOS-10 Operating Systems. An authenticated attacker with administrative privileges could exploit these vulnerabilities by sending specially crafted requests to the affected services. Successful exploitation could allow the attacker to execute arbitrary code with elevated privileges on the underlying operating system."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 7.2,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "HIGH",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-05-12T19:00:02.478Z",
            "orgId": "eb103674-0d28-4225-80f8-39fb86215de0",
            "shortName": "hpe"
          },
          "references": [
            {
              "url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05048en_us\u0026docLocale=en_US"
            }
          ],
          "source": {
            "advisory": "HPESBNW05048",
            "discovery": "EXTERNAL"
          },
          "title": "Authenticated Stack-Based Buffer Overflow in PAPI Services",
          "x_generator": {
            "engine": "Vulnogram 0.2.0"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "eb103674-0d28-4225-80f8-39fb86215de0",
        "assignerShortName": "hpe",
        "cveId": "CVE-2026-44856",
        "datePublished": "2026-05-12T19:00:02.478Z",
        "dateReserved": "2026-05-07T21:29:03.734Z",
        "dateUpdated": "2026-05-13T17:50:31.513Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-44855 (GCVE-0-2026-44855)

    Vulnerability from cvelistv5 – Published: 2026-05-12 18:59 – Updated: 2026-05-13 17:49
    VLAI
    Title
    Authenticated Stack-Based Buffer Overflow in PAPI Services
    Summary
    Stack-based buffer overflow vulnerabilities exist in several underlying management service components accessed through the command-line interface of the AOS-8 and AOS-10 Operating Systems. An authenticated attacker with administrative privileges could exploit these vulnerabilities by sending specially crafted requests to the affected services. Successful exploitation could allow the attacker to execute arbitrary code with elevated privileges on the underlying operating system.
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-121 - Stack-based Buffer Overflow
    Assigner
    hpe
    Impacted products
    Vendor Product Version
    Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS) Affected: 8.13.0.0 , ≤ 8.13.1.1 (semver)
    Affected: 8.12.0.0 , ≤ 8.12.0.6 (semver)
    Affected: 8.10.0.0 , ≤ 8.10.0.21 (semver)
    Affected: 10.7.0.0 , ≤ 10.7.2.2 (semver)
    Affected: 10.8.0.0 (semver)
    Affected: 10.4.0.0 , ≤ 10.4.1.10 (semver)
    Create a notification for this product.
    Credits
    zzcentury
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-44855",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-05-13T17:49:00.283210Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "problemTypes": [
              {
                "descriptions": [
                  {
                    "cweId": "CWE-121",
                    "description": "CWE-121 Stack-based Buffer Overflow",
                    "lang": "en",
                    "type": "CWE"
                  }
                ]
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-05-13T17:49:35.779Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "affected",
              "product": "HPE Aruba Networking Wireless Operating System (AOS)",
              "vendor": "Hewlett Packard Enterprise (HPE)",
              "versions": [
                {
                  "lessThanOrEqual": "8.13.1.1",
                  "status": "affected",
                  "version": "8.13.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "8.12.0.6",
                  "status": "affected",
                  "version": "8.12.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "8.10.0.21",
                  "status": "affected",
                  "version": "8.10.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.7.2.2",
                  "status": "affected",
                  "version": "10.7.0.0",
                  "versionType": "semver"
                },
                {
                  "status": "affected",
                  "version": "10.8.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.4.1.10",
                  "status": "affected",
                  "version": "10.4.0.0",
                  "versionType": "semver"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "reporter",
              "value": "zzcentury"
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "\u003cp\u003eStack-based buffer overflow vulnerabilities exist in several underlying management service components accessed through the command-line interface of the AOS-8 and AOS-10 Operating Systems. An authenticated attacker with administrative privileges could exploit these vulnerabilities by sending specially crafted requests to the affected services. Successful exploitation could allow the attacker to execute arbitrary code with elevated privileges on the underlying operating system.\u003c/p\u003e"
                }
              ],
              "value": "Stack-based buffer overflow vulnerabilities exist in several underlying management service components accessed through the command-line interface of the AOS-8 and AOS-10 Operating Systems. An authenticated attacker with administrative privileges could exploit these vulnerabilities by sending specially crafted requests to the affected services. Successful exploitation could allow the attacker to execute arbitrary code with elevated privileges on the underlying operating system."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 7.2,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "HIGH",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-05-12T18:59:11.553Z",
            "orgId": "eb103674-0d28-4225-80f8-39fb86215de0",
            "shortName": "hpe"
          },
          "references": [
            {
              "url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05048en_us\u0026docLocale=en_US"
            }
          ],
          "source": {
            "advisory": "HPESBNW05048",
            "discovery": "INTERNAL"
          },
          "title": "Authenticated Stack-Based Buffer Overflow in PAPI Services",
          "x_generator": {
            "engine": "Vulnogram 0.2.0"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "eb103674-0d28-4225-80f8-39fb86215de0",
        "assignerShortName": "hpe",
        "cveId": "CVE-2026-44855",
        "datePublished": "2026-05-12T18:59:11.553Z",
        "dateReserved": "2026-05-07T21:29:03.734Z",
        "dateUpdated": "2026-05-13T17:49:35.779Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-44854 (GCVE-0-2026-44854)

    Vulnerability from cvelistv5 – Published: 2026-05-12 18:58 – Updated: 2026-05-13 17:47
    VLAI
    Title
    Authenticated Remote Code Execution via Arbitrary File Write in AOS-8 and AOS-10 Web-Based Management Interface
    Summary
    Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Successful exploitation could allow an authenticated remote attacker to upload arbitrary files to the underlying operating system, potentially leading to remote code execution as a privileged user.
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-77 - Improper Neutralization of Special Elements used in a Command ('Command Injection')
    Assigner
    hpe
    Impacted products
    Vendor Product Version
    Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS) Affected: 8.13.0.0 , ≤ 8.13.1.1 (semver)
    Affected: 8.12.0.0 , ≤ 8.12.0.6 (semver)
    Affected: 8.10.0.0 , ≤ 8.10.0.21 (semver)
    Affected: 10.8.0.0 (semver)
    Affected: 10.7.0.0 , ≤ 10.7.2.2 (semver)
    Affected: 10.4.0.0 , ≤ 10.4.1.10 (semver)
    Create a notification for this product.
    Credits
    LIUPENG
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-44854",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-05-13T17:46:57.839732Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "problemTypes": [
              {
                "descriptions": [
                  {
                    "cweId": "CWE-77",
                    "description": "CWE-77 Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)",
                    "lang": "en",
                    "type": "CWE"
                  }
                ]
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-05-13T17:47:55.053Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "affected",
              "product": "HPE Aruba Networking Wireless Operating System (AOS)",
              "vendor": "Hewlett Packard Enterprise (HPE)",
              "versions": [
                {
                  "lessThanOrEqual": "8.13.1.1",
                  "status": "affected",
                  "version": "8.13.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "8.12.0.6",
                  "status": "affected",
                  "version": "8.12.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "8.10.0.21",
                  "status": "affected",
                  "version": "8.10.0.0",
                  "versionType": "semver"
                },
                {
                  "status": "affected",
                  "version": "10.8.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.7.2.2",
                  "status": "affected",
                  "version": "10.7.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.4.1.10",
                  "status": "affected",
                  "version": "10.4.0.0",
                  "versionType": "semver"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "reporter",
              "value": "LIUPENG"
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "\u003cp\u003eCommand injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Successful exploitation could allow an authenticated remote attacker to upload arbitrary files to the underlying operating system, potentially leading to remote code execution as a privileged user.\u003c/p\u003e"
                }
              ],
              "value": "Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Successful exploitation could allow an authenticated remote attacker to upload arbitrary files to the underlying operating system, potentially leading to remote code execution as a privileged user."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 7.2,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "HIGH",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-05-12T18:58:19.086Z",
            "orgId": "eb103674-0d28-4225-80f8-39fb86215de0",
            "shortName": "hpe"
          },
          "references": [
            {
              "url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05048en_us\u0026docLocale=en_US"
            }
          ],
          "source": {
            "advisory": "HPESBNW05048",
            "discovery": "INTERNAL"
          },
          "title": "Authenticated Remote Code Execution via Arbitrary File Write in AOS-8 and AOS-10 Web-Based Management Interface",
          "x_generator": {
            "engine": "Vulnogram 0.2.0"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "eb103674-0d28-4225-80f8-39fb86215de0",
        "assignerShortName": "hpe",
        "cveId": "CVE-2026-44854",
        "datePublished": "2026-05-12T18:58:19.086Z",
        "dateReserved": "2026-05-07T21:29:03.734Z",
        "dateUpdated": "2026-05-13T17:47:55.053Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-44853 (GCVE-0-2026-44853)

    Vulnerability from cvelistv5 – Published: 2026-05-12 18:56 – Updated: 2026-05-13 15:35
    VLAI
    Title
    Authenticated Remote Code Execution via Arbitrary File Write in AOS-8 and AOS-10 Web-Based Management Interface
    Summary
    Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Successful exploitation could allow an authenticated remote attacker to upload arbitrary files to the underlying operating system, potentially leading to remote code execution as a privileged user.
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-77 - Improper Neutralization of Special Elements used in a Command ('Command Injection')
    Assigner
    hpe
    Impacted products
    Vendor Product Version
    Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS) Affected: 8.13.0.0 , ≤ 8.13.1.1 (semver)
    Affected: 8.12.0.0 , ≤ 8.12.0.6 (semver)
    Affected: 8.10.0.0 , ≤ 8.10.0.21 (semver)
    Affected: 10.8.0.0 (semver)
    Affected: 10.7.0.0 , ≤ 10.7.2.2 (semver)
    Affected: 10.4.0.0 , ≤ 10.4.1.10 (semver)
    Create a notification for this product.
    Credits
    zzcentury
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-44853",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-05-13T15:34:49.727263Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "problemTypes": [
              {
                "descriptions": [
                  {
                    "cweId": "CWE-77",
                    "description": "CWE-77 Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)",
                    "lang": "en",
                    "type": "CWE"
                  }
                ]
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-05-13T15:35:40.376Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "affected",
              "product": "HPE Aruba Networking Wireless Operating System (AOS)",
              "vendor": "Hewlett Packard Enterprise (HPE)",
              "versions": [
                {
                  "lessThanOrEqual": "8.13.1.1",
                  "status": "affected",
                  "version": "8.13.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "8.12.0.6",
                  "status": "affected",
                  "version": "8.12.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "8.10.0.21",
                  "status": "affected",
                  "version": "8.10.0.0",
                  "versionType": "semver"
                },
                {
                  "status": "affected",
                  "version": "10.8.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.7.2.2",
                  "status": "affected",
                  "version": "10.7.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.4.1.10",
                  "status": "affected",
                  "version": "10.4.0.0",
                  "versionType": "semver"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "reporter",
              "value": "zzcentury"
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "\u003cp\u003eCommand injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Successful exploitation could allow an authenticated remote attacker to upload arbitrary files to the underlying operating system, potentially leading to remote code execution as a privileged user.\u003c/p\u003e"
                }
              ],
              "value": "Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Successful exploitation could allow an authenticated remote attacker to upload arbitrary files to the underlying operating system, potentially leading to remote code execution as a privileged user."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 7.2,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "HIGH",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-05-12T18:56:48.717Z",
            "orgId": "eb103674-0d28-4225-80f8-39fb86215de0",
            "shortName": "hpe"
          },
          "references": [
            {
              "url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05048en_us\u0026docLocale=en_US"
            }
          ],
          "source": {
            "advisory": "HPESBNW05048",
            "discovery": "INTERNAL"
          },
          "title": "Authenticated Remote Code Execution via Arbitrary File Write in AOS-8 and AOS-10 Web-Based Management Interface",
          "x_generator": {
            "engine": "Vulnogram 0.2.0"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "eb103674-0d28-4225-80f8-39fb86215de0",
        "assignerShortName": "hpe",
        "cveId": "CVE-2026-44853",
        "datePublished": "2026-05-12T18:56:48.717Z",
        "dateReserved": "2026-05-07T21:29:03.734Z",
        "dateUpdated": "2026-05-13T15:35:40.376Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-44852 (GCVE-0-2026-44852)

    Vulnerability from cvelistv5 – Published: 2026-05-12 18:55 – Updated: 2026-05-15 20:05
    VLAI
    Title
    Authenticated Remote Code Execution via Arbitrary File Overwrite in the AOS-8 and AOS-10 Web-Based Management Interface
    Summary
    An authenticated remote code execution vulnerability exists in the AOS-8 and AOS-10 web-based management interface. A vulnerability in the certificate download functionality could allow an authenticated remote attacker to overwrite arbitrary files on the underlying operating system by exploiting improper input validation in the file path parameter. Successful exploitation could allow the attacker to execute arbitrary commands on the underlying operating system as a privileged user.
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-296 - Improper Following of a Certificate's Chain of Trust
    Assigner
    hpe
    Impacted products
    Vendor Product Version
    Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS) Affected: 8.13.0.0 , ≤ 8.13.1.1 (semver)
    Affected: 8.12.0.0 , ≤ 8.12.0.6 (semver)
    Affected: 8.10.0.0 , ≤ 8.10.0.21 (semver)
    Affected: 10.8.0.0 (semver)
    Affected: 10.7.0.0 , ≤ 10.7.2.2 (semver)
    Affected: 10.4.0.0 , ≤ 10.4.1.10 (semver)
    Create a notification for this product.
    Credits
    zzcentury
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-44852",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-05-13T15:24:42.503798Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "problemTypes": [
              {
                "descriptions": [
                  {
                    "cweId": "CWE-296",
                    "description": "CWE-296 Improper Following of a Certificate\u0027s Chain of Trust",
                    "lang": "en",
                    "type": "CWE"
                  }
                ]
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-05-15T20:05:53.832Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "affected",
              "product": "HPE Aruba Networking Wireless Operating System (AOS)",
              "vendor": "Hewlett Packard Enterprise (HPE)",
              "versions": [
                {
                  "lessThanOrEqual": "8.13.1.1",
                  "status": "affected",
                  "version": "8.13.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "8.12.0.6",
                  "status": "affected",
                  "version": "8.12.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "8.10.0.21",
                  "status": "affected",
                  "version": "8.10.0.0",
                  "versionType": "semver"
                },
                {
                  "status": "affected",
                  "version": "10.8.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.7.2.2",
                  "status": "affected",
                  "version": "10.7.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.4.1.10",
                  "status": "affected",
                  "version": "10.4.0.0",
                  "versionType": "semver"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "reporter",
              "value": "zzcentury"
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "\u003cp\u003eAn authenticated remote code execution vulnerability exists in the AOS-8 and AOS-10 web-based management interface. A vulnerability in the certificate download functionality could allow an authenticated remote attacker to overwrite arbitrary files on the underlying operating system by exploiting improper input validation in the file path parameter. Successful exploitation could allow the attacker to execute arbitrary commands on the underlying operating system as a privileged user.\u003c/p\u003e"
                }
              ],
              "value": "An authenticated remote code execution vulnerability exists in the AOS-8 and AOS-10 web-based management interface. A vulnerability in the certificate download functionality could allow an authenticated remote attacker to overwrite arbitrary files on the underlying operating system by exploiting improper input validation in the file path parameter. Successful exploitation could allow the attacker to execute arbitrary commands on the underlying operating system as a privileged user."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 7.2,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "HIGH",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-05-12T18:55:53.008Z",
            "orgId": "eb103674-0d28-4225-80f8-39fb86215de0",
            "shortName": "hpe"
          },
          "references": [
            {
              "url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05048en_us\u0026docLocale=en_US"
            }
          ],
          "source": {
            "advisory": "HPESBNW05048",
            "discovery": "INTERNAL"
          },
          "title": "Authenticated Remote Code Execution via Arbitrary File Overwrite in the AOS-8 and AOS-10 Web-Based Management Interface",
          "x_generator": {
            "engine": "Vulnogram 0.2.0"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "eb103674-0d28-4225-80f8-39fb86215de0",
        "assignerShortName": "hpe",
        "cveId": "CVE-2026-44852",
        "datePublished": "2026-05-12T18:55:53.008Z",
        "dateReserved": "2026-05-07T21:29:03.734Z",
        "dateUpdated": "2026-05-15T20:05:53.832Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-23827 (GCVE-0-2026-23827)

    Vulnerability from cvelistv5 – Published: 2026-05-12 18:54 – Updated: 2026-05-13 15:41
    VLAI
    Title
    Unauthenticated Remote Code Execution via Heap Buffer Overflow in Network Management Service
    Summary
    A heap-based buffer overflow vulnerability exists in a Network management service of AOS-8 and AOS-10 that could allow an unauthenticated remote attacker to achieve remote code execution. Successful exploitation could allow an unauthenticated attacker to execute arbitrary code as a privileged user on the underlying operating system, potentially leading to a system compromise. Exploitation may also result in a denial-of-service (DoS) condition affecting the impacted system process.
    SSVC
    Exploitation: none Automatable: yes Technical Impact: partial
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-122 - Heap-based Buffer Overflow
    Assigner
    hpe
    Impacted products
    Vendor Product Version
    Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS) Affected: 8.13.0.0 , ≤ 8.13.1.1 (semver)
    Affected: 8.12.0.0 , ≤ 8.12.0.6 (semver)
    Affected: 8.10.0.0 , ≤ 8.10.0.21 (semver)
    Affected: 10.8.0.0 (semver)
    Affected: 10.7.0.0 , ≤ 10.7.2.2 (semver)
    Affected: 10.4.0.0 , ≤ 10.4.1.10 (semver)
    Create a notification for this product.
    Credits
    n3k
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-23827",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "yes"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-05-13T15:41:35.392668Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "problemTypes": [
              {
                "descriptions": [
                  {
                    "cweId": "CWE-122",
                    "description": "CWE-122 Heap-based Buffer Overflow",
                    "lang": "en",
                    "type": "CWE"
                  }
                ]
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-05-13T15:41:39.174Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "affected",
              "product": "HPE Aruba Networking Wireless Operating System (AOS)",
              "vendor": "Hewlett Packard Enterprise (HPE)",
              "versions": [
                {
                  "lessThanOrEqual": "8.13.1.1",
                  "status": "affected",
                  "version": "8.13.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "8.12.0.6",
                  "status": "affected",
                  "version": "8.12.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "8.10.0.21",
                  "status": "affected",
                  "version": "8.10.0.0",
                  "versionType": "semver"
                },
                {
                  "status": "affected",
                  "version": "10.8.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.7.2.2",
                  "status": "affected",
                  "version": "10.7.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.4.1.10",
                  "status": "affected",
                  "version": "10.4.0.0",
                  "versionType": "semver"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "reporter",
              "value": "n3k"
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "\u003cp\u003eA heap-based buffer overflow vulnerability exists in a Network management service of AOS-8 and AOS-10 that could allow an unauthenticated remote attacker to achieve remote code execution. Successful exploitation could allow an unauthenticated attacker to execute arbitrary code as a privileged user on the underlying operating system, potentially leading to a system compromise. Exploitation may also result in a denial-of-service (DoS) condition affecting the impacted system process.\u003c/p\u003e"
                }
              ],
              "value": "A heap-based buffer overflow vulnerability exists in a Network management service of AOS-8 and AOS-10 that could allow an unauthenticated remote attacker to achieve remote code execution. Successful exploitation could allow an unauthenticated attacker to execute arbitrary code as a privileged user on the underlying operating system, potentially leading to a system compromise. Exploitation may also result in a denial-of-service (DoS) condition affecting the impacted system process."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 7.5,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "NONE",
                "integrityImpact": "NONE",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-05-12T18:54:47.364Z",
            "orgId": "eb103674-0d28-4225-80f8-39fb86215de0",
            "shortName": "hpe"
          },
          "references": [
            {
              "url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05048en_us\u0026docLocale=en_US"
            }
          ],
          "source": {
            "advisory": "HPESBNW05048",
            "discovery": "INTERNAL"
          },
          "title": "Unauthenticated Remote Code Execution via Heap Buffer Overflow in Network Management Service",
          "x_generator": {
            "engine": "Vulnogram 0.2.0"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "eb103674-0d28-4225-80f8-39fb86215de0",
        "assignerShortName": "hpe",
        "cveId": "CVE-2026-23827",
        "datePublished": "2026-05-12T18:54:47.364Z",
        "dateReserved": "2026-01-16T15:22:49.225Z",
        "dateUpdated": "2026-05-13T15:41:39.174Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }