Threat database

An unauthenticated remote code execution vulnerability exists in the underlying operating system of HPE Networking Fabric Composer and could be exploited if certain preconditions outside of the attacker's control are met. Successful exploitation of this vulnerability could allow an unauthenticated remote attacker to execute arbitrary code as a privileged user on the underlying operating system, leading to complete compromise of the HPE Networking Fabric Composer host.

A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to conduct a stored cross-site scripting (XSS) attack against an administrative user of the interface. A successful exploit could allow an attacker to execute arbitrary script code in a victim's browser in the context of the affected interface.

An authentication bypass vulnerability exists in the underlying operating system of HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated adjacent attacker to execute arbitrary code as a privileged user on the underlying operating system, leading to complete compromise of the AFC host.

A denial of service vulnerability exists in Hewlett Packard Enterprise Integrated Lights-Out 6 (iLO 6) firmware versions prior to 1.78. This issue could allow an attacker to disrupt availability without requiring privileges or user interaction. The vulnerability has a medium severity rating with a CVSS score of 6.5. No official patch or remediation guidance has been provided yet by the vendor.

Multiple vulnerabilities in the REST API of HPE EdgeConnect SD-WAN Orchestrator versions 9.6.2.00000 and 9.6.3.00000 allow unauthenticated remote attackers to bypass web authentication and access system functions. Exploitation could lead to viewing and modifying sensitive information. The vulnerabilities have a critical CVSS score of 9.8. No official patch or remediation guidance is currently provided by the vendor.

Multiple vulnerabilities in the REST API interface of Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Orchestrator allow unauthenticated remote attackers to bypass web authentication and access system functions. Exploitation could lead to viewing and modifying sensitive information on the affected system. The vulnerabilities affect specific versions 9.6.2.00000 and 9.6.3.00000. The issue has a critical severity with a CVSS score of 9.8. No official patch or remediation guidance has been provided yet.

CVE-2026-44879 is a command injection vulnerability in the command line interface of Hewlett Packard Enterprise EdgeConnect SD-WAN Gateway (ECOS) devices. It allows a highly privileged, authenticated remote attacker to execute arbitrary commands on the underlying operating system. The vulnerability affects versions 9.4.0.0 and 9.5.0.0. The CVSS v3.1 base score is 7.2, indicating high severity. No official patch or remediation guidance has been provided yet.

CVE-2026-44878 is a high-severity vulnerability in the web-based management interface of Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateway (ECOS). It allows a highly privileged, authenticated remote attacker to access the device's filesystem. Exploiting this flaw could enable the attacker to access sensitive files and tamper with or delete system data. The vulnerability affects versions 9.4.0.0, 9.5.0.0, and 9.6.0.0 of the product. There is no official patch or remediation level currently provided by the vendor. No known exploits are reported in the wild at this time.

An authenticated path traversal vulnerability exists in AOS-CX. Successful exploitation of this vulnerability allows an attacker to copy arbitrary files to a user readable location from the command line interface of the underlying operating system, which could lead to remote code execution.

Buffer overflow vulnerabilities exist in the command line interface of AOS-CX. Successful exploitation of these vulnerabilities could allow a remote high-privileged user to execute arbitrary code as a privileged user on the underlying operating system.

An unauthenticated remote disclosure vulnerability has been identified in HPE Networking Instant On 1830, 1930, and 1960 Switches. Successful exploitation of this vulnerability could allow an unauthenticated remote threat actor to access sensitive cryptographic secrets on a vulnerable system.

CVE-2026-44871 is a high-severity command injection vulnerability in the command line interface (CLI) service accessed via the PAPI protocol in Hewlett Packard Enterprise (HPE) Aruba Networking Wireless Operating System (AOS) versions 8.10.0.0 through 8.13.0.0 and 10.4.0.0 through 10.

A session management vulnerability in AOS-8 allows previously authenticated users to retain network access after their accounts are administratively disabled. Existing sessions are not invalidated when credentials are revoked, enabling continued access until session expiration. An attacker with compromised credentials could exploit this behavior to maintain unauthorized access even after the account has been disabled.

A vulnerability exists in the web-based management interface of an AOS-10 Gateway that could allow an authenticated remote attacker to access sensitive files on the underlying operating system. Successful exploitation of this vulnerability could result in the disclosure of confidential system information, potentially enabling further attacks against the affected device.

A command injection vulnerability exists in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Successful exploitation could allow an authenticated remote attacker to place arbitrary files on the underlying filesystem of the affected device.

Command injection vulnerabilities exist in the command line interface (CLI) service accessed by the PAPI protocol of AOS-8 and AOS-10 Operating Systems. Successful exploitation of these vulnerabilities could allow an authenticated remote attacker to execute arbitrary commands on the underlying operating system.

Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Successful exploitation of these vulnerabilities could allow an authenticated remote attacker to execute arbitrary commands on the underlying operating system.

Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Successful exploitation of these vulnerabilities could allow an authenticated remote attacker to execute arbitrary commands on the underlying operating system.

Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Successful exploitation of these vulnerabilities could allow an authenticated remote attacker to execute arbitrary commands on the underlying operating system.