CVE-2026-44856
Full vulnerability record from the local CVENow database.
Description
Stack-based buffer overflow vulnerabilities exist in several underlying management service components accessed through the command-line interface of the AOS-8 and AOS-10 Operating Systems. An authenticated attacker with administrative privileges could exploit these vulnerabilities by sending specially crafted requests to the affected services. Successful exploitation could allow the attacker to execute arbitrary code with elevated privileges on the underlying operating system.
Severity
HIGH
CVSS score
7.2
(v3.1)
Vulnerability status
Analyzed
Source identifier
Published
2026-05-12 20:16:44.217000
Last modified
2026-10-26 14:10:00.130000
View original CVE JSON
{
"id": "CVE-2026-44856",
"sourceIdentifier": "[email protected]",
"published": "2026-05-12T20:16:44.217",
"lastModified": "2026-10-26T14:10:00.130",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Stack-based buffer overflow vulnerabilities exist in several underlying management service components accessed through the command-line interface of the AOS-8 and AOS-10 Operating Systems. An authenticated attacker with administrative privileges could exploit these vulnerabilities by sending specially crafted requests to the affected services. Successful exploitation could allow the attacker to execute arbitrary code with elevated privileges on the underlying operating system."
},
{
"lang": "es",
"value": "Existen vulnerabilidades de desbordamiento de búfer basado en pila en varios componentes subyacentes del servicio de gestión a los que se accede a través de la interfaz de línea de comandos de los sistemas operativos AOS-8 y AOS-10. Un atacante autenticado con privilegios administrativos podría explotar estas vulnerabilidades enviando solicitudes especialmente diseñadas a los servicios afectados. Una explotación exitosa podría permitir al atacante ejecutar código arbitrario con privilegios elevados en el sistema operativo subyacente."
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "Hewlett Packard Enterprise (HPE)",
"product": "HPE Aruba Networking Wireless Operating System (AOS)",
"defaultStatus": "affected",
"versions": [
{
"version": "8.13.0.0",
"lessThanOrEqual": "8.13.1.1",
"versionType": "semver",
"status": "affected"
},
{
"version": "8.12.0.0",
"lessThanOrEqual": "8.12.0.6",
"versionType": "semver",
"status": "affected"
},
{
"version": "8.10.0.0",
"lessThanOrEqual": "8.10.0.21",
"versionType": "semver",
"status": "affected"
},
{
"version": "10.7.0.0",
"lessThanOrEqual": "10.7.2.2",
"versionType": "semver",
"status": "affected"
},
{
"version": "10.8.0.0",
"versionType": "semver",
"status": "affected"
},
{
"version": "10.4.0.0",
"lessThanOrEqual": "10.4.1.10",
"versionType": "semver",
"status": "affected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "HIGH",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.2,
"impactScore": 5.9
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2026-05-13T17:50:13.939286Z",
"id": "CVE-2026-44856",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-121"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.5.4.0",
"versionEndExcluding": "8.10.0.22",
"matchCriteriaId": "A3310CEA-A66E-4374-91DE-5B9ACC49005E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
"versionStartIncluding": "8.11.0.0",
"versionEndExcluding": "8.12.0.7",
"matchCriteriaId": "6B106E8F-BD70-4427-8B0B-BE6A060DA43A"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
"versionStartIncluding": "8.13.0.0",
"versionEndExcluding": "8.13.1.2",
"matchCriteriaId": "0CA7BD88-F241-4D60-9BA7-7409A1E435CC"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
"versionStartIncluding": "10.4.0.0",
"versionEndExcluding": "10.4.1.11",
"matchCriteriaId": "4E47CF22-3260-4755-A11E-B16AEAE0743C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
"versionStartIncluding": "10.5.0.0",
"versionEndExcluding": "10.7.2.3",
"matchCriteriaId": "60034F6F-DB9F-40E1-9719-96EB3837A546"
}
]
}
]
},
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:arubanetworks:sd-wan:*:*:*:*:*:*:*:*",
"versionStartIncluding": "8.6.0.4-2.2.0.0",
"versionEndIncluding": "8.6.0.4-2.2.0.7",
"matchCriteriaId": "4311C56C-9E48-4695-A24C-C93FEFB6F354"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:arubanetworks:sd-wan:*:*:*:*:*:*:*:*",
"versionStartIncluding": "8.7.0.0-2.3.0.0",
"versionEndIncluding": "8.7.0.0-2.3.0.9",
"matchCriteriaId": "C7825F9F-FC5F-4C61-A67B-5034E943F8C3"
}
]
}
]
}
],
"references": [
{
"url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05048en_us&docLocale=en_US",
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}