An unauthenticated remote disclosure vulnerability has been identified in HPE Networking Instant On 1830, 1930, and 1960 Switches. Successful exploitation of this vulnerability could allow an unauthenticated remote threat actor to access sensitive cryptographic secrets on a vulnerable system.
CVE-2026-44871 is a high-severity command injection vulnerability in the command line interface (CLI) service accessed via the PAPI protocol in Hewlett Packard Enterprise (HPE) Aruba Networking Wireless Operating System (AOS) versions 8.10.0.0 through 8.13.0.0 and 10.4.0.0 through 10.
A session management vulnerability in AOS-8 allows previously authenticated users to retain network access after their accounts are administratively disabled. Existing sessions are not invalidated when credentials are revoked, enabling continued access until session expiration. An attacker with compromised credentials could exploit this behavior to maintain unauthorized access even after the account has been disabled.
A vulnerability exists in the web-based management interface of an AOS-10 Gateway that could allow an authenticated remote attacker to access sensitive files on the underlying operating system. Successful exploitation of this vulnerability could result in the disclosure of confidential system information, potentially enabling further attacks against the affected device.
A command injection vulnerability exists in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Successful exploitation could allow an authenticated remote attacker to place arbitrary files on the underlying filesystem of the affected device.
Command injection vulnerabilities exist in the command line interface (CLI) service accessed by the PAPI protocol of AOS-8 and AOS-10 Operating Systems. Successful exploitation of these vulnerabilities could allow an authenticated remote attacker to execute arbitrary commands on the underlying operating system.
Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Successful exploitation of these vulnerabilities could allow an authenticated remote attacker to execute arbitrary commands on the underlying operating system.
Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Successful exploitation of these vulnerabilities could allow an authenticated remote attacker to execute arbitrary commands on the underlying operating system.
Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Successful exploitation of these vulnerabilities could allow an authenticated remote attacker to execute arbitrary commands on the underlying operating system.
Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Successful exploitation of these vulnerabilities could allow an authenticated remote attacker to execute arbitrary commands on the underlying operating system.
CVE-2026-44865 is a command injection vulnerability in the web-based management interface of Hewlett Packard Enterprise (HPE) Aruba Networking Wireless Operating System (AOS) versions 8.10.0.0 through 8.13.0.0 and 10.4.0.0 through 10.
CVE-2026-44864 is a high-severity SQL injection vulnerability in Hewlett Packard Enterprise's Aruba Networking Wireless Operating System (AOS) versions 8.10.0.0 through 10.8.0.0. It affects several service components accessible via the command-line interface and management protocol. An authenticated attacker with administrative privileges can inject crafted input into unsanitized parameters used in backend database queries, potentially leading to arbitrary command execution on the underlying OS. No official patch or remediation guidance is currently available from the vendor.
CVE-2026-44863 is a high-severity SQL injection vulnerability in Hewlett Packard Enterprise's Aruba Networking Wireless Operating System (AOS) versions 8.10.0.0 through 10.8.0.0. It affects several service components accessible via the command-line interface and management protocol. An authenticated attacker with administrative privileges can inject crafted input into unsanitized parameters used in backend database queries, potentially leading to arbitrary command execution on the underlying operating system. No official patch or remediation guidance is currently available from the vendor.
CVE-2026-44862 is a high-severity SQL injection vulnerability in Hewlett Packard Enterprise's Aruba Networking Wireless Operating System (AOS) versions 8.10.0.0 through 8.13.0.0 and 10.4.0.0 through 10.
CVE-2026-44861 is a high-severity SQL injection vulnerability affecting Hewlett Packard Enterprise (HPE) Aruba Networking Wireless Operating System (AOS) versions 8.10.0.0 through 8.13.0.0 and 10.4.0.0 through 10.
CVE-2026-44860 is a high-severity SQL injection vulnerability in Hewlett Packard Enterprise's Aruba Networking Wireless Operating System (AOS) versions 8.10.0.0 through 10.8.0.0. It affects several underlying service components accessible via the command-line interface and management protocol. An authenticated attacker with administrative privileges can inject crafted input into unsanitized parameters used in backend database queries. Successful exploitation could lead to arbitrary command execution on the underlying operating system.
CVE-2026-44859 is a stack-based buffer overflow vulnerability in Hewlett Packard Enterprise's Aruba Networking Wireless Operating System (AOS) versions 8.10.0.0 through 8.13.0.0 and 10.4.0.0 through 10.
CVE-2026-44858 is a stack-based buffer overflow vulnerability in Hewlett Packard Enterprise's Aruba Networking Wireless Operating System (AOS) versions 8.10.0.0 through 8.13.0.0 and 10.4.0.0 through 10.
CVE-2026-44857 is a high-severity stack-based buffer overflow vulnerability in Hewlett Packard Enterprise's Aruba Networking Wireless Operating System (AOS) versions 8.10.0.0 through 8.13.0.0 and 10.4.0.0 through 10.
CVE-2026-44856 is a stack-based buffer overflow vulnerability in Hewlett Packard Enterprise's Aruba Networking Wireless Operating System (AOS) versions 8.10.0.0 through 8.13.0.0 and 10.4.0.0 through 10.