CVE-2026-44874

🗓️ 12 May 2026 19:19:25Reported by hpeType

Authenticated attacker can download arbitrary files from the AOS-10 web interface, exposing sensitive operating system data.

Reporter	Title	Published	Views	Family All 9
ATTACKERKB	CVE-2026-44874	12 May 202619:19	–	attackerkb
Circl	CVE-2026-44874	12 May 202622:59	–	circl
CNNVD	HPE Aruba Networking Wireless Operating System 安全漏洞	12 May 202600:00	–	cnnvd
Cvelist	CVE-2026-44874 Authenticated Arbitrary File Download via AOS-10 Web-Based Management Interface	12 May 202619:19	–	cvelist
EUVD	EUVD-2026-29823	12 May 202621:31	–	euvd
NVD	CVE-2026-44874	12 May 202620:16	–	nvd
Positive Technologies	PT-2026-40383	12 May 202600:00	–	ptsecurity
RedhatCVE	CVE-2026-44874	13 May 202620:23	–	redhatcve
Vulnrichment	CVE-2026-44874 Authenticated Arbitrary File Download via AOS-10 Web-Based Management Interface	12 May 202619:19	–	vulnrichment

NVD

Node

arubanetworks arubaosRange10.4.0.0–10.4.1.11

arubanetworks arubaosRange10.5.0.0–10.7.2.3

arubanetworks arubaosMatch10.8.0.0

[
  {
    "vendor": "Hewlett Packard Enterprise (HPE)",
    "product": "HPE Aruba Networking Wireless Operating System (AOS)",
    "versions": [
      {
        "status": "affected",
        "version": "10.7.0.0",
        "lessThanOrEqual": "10.7.2.2",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "10.8.0.0",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "10.4.0.0",
        "lessThanOrEqual": "10.4.1.10",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "affected"
  }
]

Source	Link
support	www.support.hpe.com/hpesc/public/docDisplay

15 May 2026 12:44Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.14.9

EPSS0.00043

SSVC

CWE-284