Threats Tagged 'cve-2026-44878'

A vulnerability exists in the web-based management interface of an ECOS device that allows a highly privileged, authenticated remote attacker to access the device's filesystem. Exploiting this flaw could enable the attacker to read sensitive files and modify or delete system data. The vulnerability has a high severity rating based on CVSS 3.1 metrics indicating network attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. No specific affected versions or patches are currently documented. There are no known exploits in the wild at this time.

CVE-2026-44878 is a high-severity vulnerability in the web-based management interface of Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateway (ECOS). It allows a highly privileged, authenticated remote attacker to access the device's filesystem. Exploiting this flaw could enable the attacker to access sensitive files and tamper with or delete system data. The vulnerability affects versions 9.4.0.0, 9.5.0.0, and 9.6.0.0 of the product. There is no official patch or remediation level currently provided by the vendor. No known exploits are reported in the wild at this time.