High severity7.2NVD Advisory· Published May 12, 2026· Updated May 14, 2026
CVE-2026-44867
CVE-2026-44867
Description
Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Successful exploitation of these vulnerabilities could allow an authenticated remote attacker to execute arbitrary commands on the underlying operating system.
Affected products
4- cpe:2.3:a:arubanetworks:sd-wan:*:*:*:*:*:*:*:*Range: >=8.6.0.4-2.2.0.0,<=8.6.0.4-2.2.0.7
Patches
Vulnerability mechanics
References
1- support.hpe.com/hpesc/public/docDisplaynvdVendor Advisory
News mentions
0No linked articles in our index yet.