CVE-2026-44861

🗓️ 12 May 2026 19:06:35Reported by hpeType

Authenticated remote code execution via SQL injection in AOS-8 and AOS-10; admins can trigger arbitrary OS commands.

Reporter	Title	Published	Views	Family All 9
ATTACKERKB	CVE-2026-44861	12 May 202619:06	–	attackerkb
Circl	CVE-2026-44861	12 May 202622:51	–	circl
CNNVD	HPE Aruba Networking Wireless Operating System 安全漏洞	12 May 202600:00	–	cnnvd
Cvelist	CVE-2026-44861 Authenticated Remote Code Execution via SQL Injection in AOS-8 and AOS-10 Operating Systems	12 May 202619:06	–	cvelist
EUVD	EUVD-2026-29811	12 May 202621:31	–	euvd
NVD	CVE-2026-44861	12 May 202620:16	–	nvd
Positive Technologies	PT-2026-40371	12 May 202600:00	–	ptsecurity
RedhatCVE	CVE-2026-44861	13 May 202620:23	–	redhatcve
Vulnrichment	CVE-2026-44861 Authenticated Remote Code Execution via SQL Injection in AOS-8 and AOS-10 Operating Systems	12 May 202619:06	–	vulnrichment

NVD

Node

arubanetworks arubaosRange6.5.4.0–8.10.0.22

arubanetworks arubaosRange8.11.0.0–8.12.0.7

arubanetworks arubaosRange8.13.0.0–8.13.1.2

arubanetworks arubaosRange10.4.0.0–10.4.1.11

arubanetworks arubaosRange10.5.0.0–10.7.2.3

Node

arubanetworks sd-wanRange8.6.0.4-2.2.0.0–8.6.0.4-2.2.0.7

arubanetworks sd-wanRange8.7.0.0-2.3.0.0–8.7.0.0-2.3.0.9

[
  {
    "vendor": "Hewlett Packard Enterprise (HPE)",
    "product": "HPE Aruba Networking Wireless Operating System (AOS)",
    "versions": [
      {
        "status": "affected",
        "version": "8.13.0.0",
        "lessThanOrEqual": "8.13.1.1",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "8.12.0.0",
        "lessThanOrEqual": "8.12.0.6",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "8.10.0.0",
        "lessThanOrEqual": "8.10.0.21",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "10.7.0.0",
        "lessThanOrEqual": "10.7.2.2",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "10.8.0.0",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "10.4.0.0",
        "lessThanOrEqual": "10.4.1.10",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "affected"
  }
]

Source	Link
support	www.support.hpe.com/hpesc/public/docDisplay

14 May 2026 18:41Current

6.2Medium risk

Vulners AI Score6.2

CVSS 3.17.2

EPSS0.00037

SSVC

CWE-89