VYPR
← All advisories
High severity7.2NVD Advisory· Published May 12, 2026· Updated May 14, 2026

CVE-2026-44870

CVE-2026-44870

Description

Command injection vulnerabilities exist in the command line interface (CLI) service accessed by the PAPI protocol of AOS-8 and AOS-10 Operating Systems. Successful exploitation of these vulnerabilities could allow an authenticated remote attacker to execute arbitrary commands on the underlying operating system.

Affected products

2
  • Arubanetworks/Sd Wan
    cpe:2.3:a:arubanetworks:sd-wan:*:*:*:*:*:*:*:*
    Range: >=8.6.0.4-2.2.0.0,<=8.6.0.4-2.2.0.7
  • Arubanetworks/Arubaos
    cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*
    Range: >=6.5.4.0,<8.10.0.22

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.