Vulnerability-Lookup

CVE-2026-44878 (GCVE-0-2026-44878)

Vulnerability from cvelistv5 – Published: 2026-07-21 20:42 – Updated: 2026-07-23 13:29

Title

Authenticated Path Traversal allows Unauthorized Access in Web Interface

Summary

A vulnerability in the web-based management interface of an ECOS device could allow a highly privileged, authenticated remote attacker to access the device's filesystem. Successful exploitation of this vulnerability could allow an attacker to access sensitive files and tamper with or delete system data.

Severity

7.2 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

CWE-377 - Insecure Temporary File
CWE-732 - Incorrect Permission Assignment for Critical Resource

Assigner

hpe

References

1 reference

URL	Tags
https://support.hpe.com/hpesc/public/docDisplay?d…

Impacted products

1 product

Vendor	Product	Version
Hewlett Packard Enterprise (HPE)	EdgeConnect SD-WAN Gateway (ECOS)	Affected: 9.4.0.0 , ≤ 9.4.6.0 (semver) Affected: 9.5.0.0 , ≤ 9.5.6.0 (semver) Affected: 9.6.0.0 , ≤ 9.6.1.0 (semver)

Credits

moonv

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-44878",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-23T13:29:12.335150Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-377",
                "description": "CWE-377 Insecure Temporary File",
                "lang": "en",
                "type": "CWE"
              }
            ]
          },
          {
            "descriptions": [
              {
                "cweId": "CWE-732",
                "description": "CWE-732 Incorrect Permission Assignment for Critical Resource",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-23T13:29:55.282Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "affected",
          "product": "EdgeConnect SD-WAN Gateway (ECOS)",
          "vendor": "Hewlett Packard Enterprise (HPE)",
          "versions": [
            {
              "lessThanOrEqual": "9.4.6.0",
              "status": "affected",
              "version": "9.4.0.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "9.5.6.0",
              "status": "affected",
              "version": "9.5.0.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "9.6.1.0",
              "status": "affected",
              "version": "9.6.0.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "moonv"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eA vulnerability in the web-based management interface of an ECOS device could allow a highly privileged, authenticated remote attacker to access the device\u0027s filesystem. Successful exploitation of this vulnerability could allow an attacker to access sensitive files and tamper with or delete system data.\u003c/p\u003e"
            }
          ],
          "value": "A vulnerability in the web-based management interface of an ECOS device could allow a highly privileged, authenticated remote attacker to access the device\u0027s filesystem. Successful exploitation of this vulnerability could allow an attacker to access sensitive files and tamper with or delete system data."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-21T20:42:17.908Z",
        "orgId": "eb103674-0d28-4225-80f8-39fb86215de0",
        "shortName": "hpe"
      },
      "references": [
        {
          "url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05013en_us\u0026docLocale=en_US"
        }
      ],
      "source": {
        "advisory": "HPESBNW05013",
        "discovery": "EXTERNAL"
      },
      "title": "Authenticated Path Traversal allows Unauthorized Access in Web Interface",
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "eb103674-0d28-4225-80f8-39fb86215de0",
    "assignerShortName": "hpe",
    "cveId": "CVE-2026-44878",
    "datePublished": "2026-07-21T20:42:17.908Z",
    "dateReserved": "2026-05-07T21:29:22.243Z",
    "dateUpdated": "2026-07-23T13:29:55.282Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-44878",
      "date": "2026-07-23",
      "epss": "0.00331",
      "percentile": "0.25452"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2026-44878\",\"sourceIdentifier\":\"security-alert@hpe.com\",\"published\":\"2026-07-21T21:16:49.640\",\"lastModified\":\"2026-07-23T15:51:22.823\",\"vulnStatus\":\"Awaiting Analysis\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"A vulnerability in the web-based management interface of an ECOS device could allow a highly privileged, authenticated remote attacker to access the device\u0027s filesystem. Successful exploitation of this vulnerability could allow an attacker to access sensitive files and tamper with or delete system data.\"}],\"affected\":[{\"source\":\"security-alert@hpe.com\",\"affectedData\":[{\"vendor\":\"Hewlett Packard Enterprise (HPE)\",\"product\":\"EdgeConnect SD-WAN Gateway (ECOS)\",\"defaultStatus\":\"affected\",\"versions\":[{\"version\":\"9.4.0.0\",\"lessThanOrEqual\":\"9.4.6.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"9.5.0.0\",\"lessThanOrEqual\":\"9.5.6.0\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"9.6.0.0\",\"lessThanOrEqual\":\"9.6.1.0\",\"versionType\":\"semver\",\"status\":\"affected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"security-alert@hpe.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":7.2,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"HIGH\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.2,\"impactScore\":5.9}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-07-23T13:29:12.335150Z\",\"id\":\"CVE-2026-44878\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"total\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-377\"},{\"lang\":\"en\",\"value\":\"CWE-732\"}]}],\"references\":[{\"url\":\"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05013en_us\u0026docLocale=en_US\",\"source\":\"security-alert@hpe.com\"}]}}",
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-44878\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-07-23T13:29:12.335150Z\"}}}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-377\", \"description\": \"CWE-377 Insecure Temporary File\"}]}, {\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-732\", \"description\": \"CWE-732 Incorrect Permission Assignment for Critical Resource\"}]}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-07-23T13:28:05.526Z\"}}], \"cna\": {\"title\": \"Authenticated Path Traversal allows Unauthorized Access in Web Interface\", \"source\": {\"advisory\": \"HPESBNW05013\", \"discovery\": \"EXTERNAL\"}, \"credits\": [{\"lang\": \"en\", \"type\": \"reporter\", \"value\": \"moonv\"}], \"metrics\": [{\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 7.2, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"HIGH\", \"confidentialityImpact\": \"HIGH\"}, \"scenarios\": [{\"lang\": \"en\", \"value\": \"GENERAL\"}]}], \"affected\": [{\"vendor\": \"Hewlett Packard Enterprise (HPE)\", \"product\": \"EdgeConnect SD-WAN Gateway (ECOS)\", \"versions\": [{\"status\": \"affected\", \"version\": \"9.4.0.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"9.4.6.0\"}, {\"status\": \"affected\", \"version\": \"9.5.0.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"9.5.6.0\"}, {\"status\": \"affected\", \"version\": \"9.6.0.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"9.6.1.0\"}], \"defaultStatus\": \"affected\"}], \"references\": [{\"url\": \"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05013en_us\u0026docLocale=en_US\"}], \"x_generator\": {\"engine\": \"Vulnogram 0.2.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"A vulnerability in the web-based management interface of an ECOS device could allow a highly privileged, authenticated remote attacker to access the device\u0027s filesystem. Successful exploitation of this vulnerability could allow an attacker to access sensitive files and tamper with or delete system data.\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"\u003cp\u003eA vulnerability in the web-based management interface of an ECOS device could allow a highly privileged, authenticated remote attacker to access the device\u0027s filesystem. Successful exploitation of this vulnerability could allow an attacker to access sensitive files and tamper with or delete system data.\u003c/p\u003e\", \"base64\": false}]}], \"providerMetadata\": {\"orgId\": \"eb103674-0d28-4225-80f8-39fb86215de0\", \"shortName\": \"hpe\", \"dateUpdated\": \"2026-07-21T20:42:17.908Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2026-44878\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-07-23T13:29:55.282Z\", \"dateReserved\": \"2026-05-07T21:29:22.243Z\", \"assignerOrgId\": \"eb103674-0d28-4225-80f8-39fb86215de0\", \"datePublished\": \"2026-07-21T20:42:17.908Z\", \"assignerShortName\": \"hpe\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}

CERTFR-2026-AVI-0908

Vulnerability from certfr_avis - Published: 2026-07-22 - Updated: 2026-07-22

De multiples vulnérabilités ont été découvertes dans les produits HPE Aruba Networking. Elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une atteinte à la confidentialité des données et un contournement de la politique de sécurité.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Impacted products

Vendor	Product	Description
HPE Aruba Networking	AOS-CX	AOS-CX versions 10.17.x antérieures à 10.17.1021
HPE Aruba Networking	ECOS	EdgeConnect SD-WAN Gateway (ECOS) versions 9.4.x antérieures à ECOS-9.4.7.0
HPE Aruba Networking	Private 5G Core	Private 5G Core versions antérieures à 1.26.1.2
HPE Aruba Networking	ECOS	EdgeConnect SD-WAN Gateway (ECOS) versions 9.6.x antérieures à ECOS-9.6.2.0
HPE Aruba Networking	ECOS	EdgeConnect SD-WAN Gateway (ECOS) versions 9.5.x antérieures à ECOS-9.5.7.0
HPE Aruba Networking	ECOS	EdgeConnect SD-WAN Gateway (ECOS) versions 9.7.x antérieures à ECOS-9.7.0.0
HPE Aruba Networking	AOS-CX	AOS-CX versions 10.18.x antérieures à 10.18.0001
HPE Aruba Networking	AOS-CX	AOS-CX versions 10.13.x antérieures à 10.13.1180
HPE Aruba Networking	AOS-CX	AOS-CX versions 10.16.x antérieures à 10.16.1051

References

Title

Publication Time

Tags

Bulletin de sécurité HPE Aruba Networking HPESBNW05013	2026-07-21	vendor-advisory
Bulletin de sécurité HPE Aruba Networking HPESBNW05083	2026-07-21	vendor-advisory
Bulletin de sécurité HPE Aruba Networking HPESBNW05081	2026-07-22	vendor-advisory

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "AOS-CX versions 10.17.x ant\u00e9rieures \u00e0 10.17.1021",
      "product": {
        "name": "AOS-CX",
        "vendor": {
          "name": "HPE Aruba Networking",
          "scada": false
        }
      }
    },
    {
      "description": "EdgeConnect SD-WAN Gateway (ECOS) versions 9.4.x ant\u00e9rieures \u00e0 ECOS-9.4.7.0",
      "product": {
        "name": "ECOS",
        "vendor": {
          "name": "HPE Aruba Networking",
          "scada": false
        }
      }
    },
    {
      "description": "Private 5G Core versions ant\u00e9rieures \u00e0 1.26.1.2",
      "product": {
        "name": "Private 5G Core",
        "vendor": {
          "name": "HPE Aruba Networking",
          "scada": false
        }
      }
    },
    {
      "description": "EdgeConnect SD-WAN Gateway (ECOS) versions 9.6.x ant\u00e9rieures \u00e0 ECOS-9.6.2.0",
      "product": {
        "name": "ECOS",
        "vendor": {
          "name": "HPE Aruba Networking",
          "scada": false
        }
      }
    },
    {
      "description": "EdgeConnect SD-WAN Gateway (ECOS) versions 9.5.x ant\u00e9rieures \u00e0 ECOS-9.5.7.0",
      "product": {
        "name": "ECOS",
        "vendor": {
          "name": "HPE Aruba Networking",
          "scada": false
        }
      }
    },
    {
      "description": "EdgeConnect SD-WAN Gateway (ECOS) versions 9.7.x ant\u00e9rieures \u00e0 ECOS-9.7.0.0",
      "product": {
        "name": "ECOS",
        "vendor": {
          "name": "HPE Aruba Networking",
          "scada": false
        }
      }
    },
    {
      "description": "AOS-CX versions 10.18.x ant\u00e9rieures \u00e0 10.18.0001",
      "product": {
        "name": "AOS-CX",
        "vendor": {
          "name": "HPE Aruba Networking",
          "scada": false
        }
      }
    },
    {
      "description": "AOS-CX versions 10.13.x ant\u00e9rieures \u00e0 10.13.1180",
      "product": {
        "name": "AOS-CX",
        "vendor": {
          "name": "HPE Aruba Networking",
          "scada": false
        }
      }
    },
    {
      "description": "AOS-CX versions 10.16.x ant\u00e9rieures \u00e0 10.16.1051",
      "product": {
        "name": "AOS-CX",
        "vendor": {
          "name": "HPE Aruba Networking",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2026-63454",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-63454"
    },
    {
      "name": "CVE-2026-44879",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-44879"
    },
    {
      "name": "CVE-2026-44878",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-44878"
    },
    {
      "name": "CVE-2026-44880",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-44880"
    },
    {
      "name": "CVE-2026-48020",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-48020"
    },
    {
      "name": "CVE-2026-35387",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-35387"
    },
    {
      "name": "CVE-2026-63453",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-63453"
    }
  ],
  "initial_release_date": "2026-07-22T00:00:00",
  "last_revision_date": "2026-07-22T00:00:00",
  "links": [],
  "reference": "CERTFR-2026-AVI-0908",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2026-07-22T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits HPE Aruba Networking. Elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es et un contournement de la politique de s\u00e9curit\u00e9.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits HPE Aruba Networking",
  "vendor_advisories": [
    {
      "published_at": "2026-07-21",
      "title": "Bulletin de s\u00e9curit\u00e9 HPE Aruba Networking HPESBNW05013",
      "url": "https://csaf.arubanetworking.hpe.com/2026/hpe_aruba_networking_-_hpesbnw05013.txt"
    },
    {
      "published_at": "2026-07-21",
      "title": "Bulletin de s\u00e9curit\u00e9 HPE Aruba Networking HPESBNW05083",
      "url": "https://csaf.arubanetworking.hpe.com/2026/hpe_aruba_networking_-_hpesbnw05083.txt"
    },
    {
      "published_at": "2026-07-22",
      "title": "Bulletin de s\u00e9curit\u00e9 HPE Aruba Networking HPESBNW05081",
      "url": "https://csaf.arubanetworking.hpe.com/2026/hpe_aruba_networking_-_hpesbnw05081.txt"
    }
  ]
}

FKIE_CVE-2026-44878

Vulnerability from fkie_nvd - Published: 2026-07-21 21:16 - Updated: 2026-07-21 21:16

Severity

7.2 (High) - CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Summary

References

	URL	Tags
	security-alert@hpe.com	https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05013en_us&docLocale=en_US

Impacted products

	Vendor	Product	Version

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "defaultStatus": "affected",
          "product": "EdgeConnect SD-WAN Gateway (ECOS)",
          "vendor": "Hewlett Packard Enterprise (HPE)",
          "versions": [
            {
              "lessThanOrEqual": "9.4.6.0",
              "status": "affected",
              "version": "9.4.0.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "9.5.6.0",
              "status": "affected",
              "version": "9.5.0.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "9.6.1.0",
              "status": "affected",
              "version": "9.6.0.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "source": "security-alert@hpe.com"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "A vulnerability in the web-based management interface of an ECOS device could allow a highly privileged, authenticated remote attacker to access the device\u0027s filesystem. Successful exploitation of this vulnerability could allow an attacker to access sensitive files and tamper with or delete system data."
    }
  ],
  "id": "CVE-2026-44878",
  "lastModified": "2026-07-21T21:16:49.640",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 7.2,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "HIGH",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 1.2,
        "impactScore": 5.9,
        "source": "security-alert@hpe.com",
        "type": "Secondary"
      }
    ]
  },
  "published": "2026-07-21T21:16:49.640",
  "references": [
    {
      "source": "security-alert@hpe.com",
      "url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05013en_us\u0026docLocale=en_US"
    }
  ],
  "sourceIdentifier": "security-alert@hpe.com",
  "vulnStatus": "Received"
}

GHSA-4QH6-M8H4-CFF3

Vulnerability from github – Published: 2026-07-21 21:32 – Updated: 2026-07-21 21:32

Details

Severity

7.2 (High)


                  
                    CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2026-44878"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-377"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2026-07-21T21:16:49Z",
    "severity": "HIGH"
  },
  "details": "A vulnerability in the web-based management interface of an ECOS device could allow a highly privileged, authenticated remote attacker to access the device\u0027s filesystem. Successful exploitation of this vulnerability could allow an attacker to access sensitive files and tamper with or delete system data.",
  "id": "GHSA-4qh6-m8h4-cff3",
  "modified": "2026-07-21T21:32:42Z",
  "published": "2026-07-21T21:32:42Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44878"
    },
    {
      "type": "WEB",
      "url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05013en_us\u0026docLocale=en_US"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ]
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.

Action not permitted

CVE-2026-44878 (GCVE-0-2026-44878)

CERTFR-2026-AVI-0908

Solutions

FKIE_CVE-2026-44878

GHSA-4QH6-M8H4-CFF3

Tags

Sightings

Nomenclature