CVE-2026-44867: Authenticated Command Injection Vulnerabilities in the Web-Based Management Interface of AOS-8 and AOS-10
Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Successful exploitation of these vulnerabilities could allow an authenticated remote attacker to execute arbitrary commands on the underlying operating system.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-44867?
CVE-2026-44867 is classified as a high severity vulnerability due to its potential for command injection exploitation.
How do I fix CVE-2026-44867?
To fix CVE-2026-44867, update the AOS-8 or AOS-10 firmware to the latest patched version provided by the vendor.
Which versions are affected by CVE-2026-44867?
CVE-2026-44867 affects AOS-8 versions below 8.10.0.22 and AOS-10 versions below 10.4.1.11.
What type of vulnerability is CVE-2026-44867?
CVE-2026-44867 is an authenticated command injection vulnerability found in the web-based management interface.
Who is affected by CVE-2026-44867?
Users of Aruba AOS-8 and AOS-10 systems with the specified vulnerable versions are at risk of CVE-2026-44867.