CVE-2026-44859

🗓️ 12 May 2026 19:04:20Reported by hpeType

Authenticated stack overflow in PAPI services on AOS eight and ten lets an admin execute code.

Reporter	Title	Published	Views	Family All 9
ATTACKERKB	CVE-2026-44859	12 May 202619:04	–	attackerkb
Circl	CVE-2026-44859	12 May 202622:54	–	circl
CNNVD	HPE Aruba Networking Wireless Operating System 安全漏洞	12 May 202600:00	–	cnnvd
Cvelist	CVE-2026-44859 Authenticated Stack-Based Buffer Overflow in PAPI Services	12 May 202619:04	–	cvelist
EUVD	EUVD-2026-29809	12 May 202621:31	–	euvd
NVD	CVE-2026-44859	12 May 202620:16	–	nvd
Positive Technologies	PT-2026-40369	12 May 202600:00	–	ptsecurity
RedhatCVE	CVE-2026-44859	13 May 202620:23	–	redhatcve
Vulnrichment	CVE-2026-44859 Authenticated Stack-Based Buffer Overflow in PAPI Services	12 May 202619:04	–	vulnrichment

NVD

Node

arubanetworks arubaosRange6.5.4.0–8.10.0.22

arubanetworks arubaosRange8.11.0.0–8.12.0.7

arubanetworks arubaosRange8.13.0.0–8.13.1.2

arubanetworks arubaosRange10.4.0.0–10.4.1.11

arubanetworks arubaosRange10.5.0.0–10.7.2.3

Node

arubanetworks sd-wanRange8.6.0.4-2.2.0.0–8.6.0.4-2.2.0.7

arubanetworks sd-wanRange8.7.0.0-2.3.0.0–8.7.0.0-2.3.0.9

[
  {
    "vendor": "Hewlett Packard Enterprise (HPE)",
    "product": "HPE Aruba Networking Wireless Operating System (AOS)",
    "versions": [
      {
        "status": "affected",
        "version": "8.13.0.0",
        "lessThanOrEqual": "8.13.1.1",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "8.12.0.0",
        "lessThanOrEqual": "8.12.0.6",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "8.10.0.0",
        "lessThanOrEqual": "8.10.0.21",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "10.7.0.0",
        "lessThanOrEqual": "10.7.2.2",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "10.8.0.0",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "10.4.0.0",
        "lessThanOrEqual": "10.4.1.10",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "affected"
  }
]

Source	Link
support	www.support.hpe.com/hpesc/public/docDisplay

17 Jun 2026 10:51Current

6.4Medium risk

Vulners AI Score6.4

CVSS 3.17.2

EPSS0.0036

SSVC

CWE-121