A vulnerability exists in the web-based management interface of an AOS-10 Gateway that could allow an authenticated remote attacker to access sensitive files on the underlying operating system. Successful exploitation of this vulnerability could result in the disclosure of confidential system information, potentially enabling further attacks against the affected device.
References
| Link | Resource |
|---|---|
| https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05048en_us&docLocale=en_US | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
15 May 2026, 12:44
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Arubanetworks arubaos
Arubanetworks |
|
| References | () https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05048en_us&docLocale=en_US - Vendor Advisory | |
| CPE | cpe:2.3:o:arubanetworks:arubaos:10.8.0.0:*:*:*:*:*:*:* cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:* |
13 May 2026, 16:17
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-284 |
12 May 2026, 20:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-05-12 20:16
Updated : 2026-05-15 12:44
NVD link : CVE-2026-44874
Mitre link : CVE-2026-44874
CVE.ORG link : CVE-2026-44874
JSON object : View
Products Affected
arubanetworks
- arubaos
CWE
CWE-284
Improper Access Control