PT-2026-40366 · Aruba Networks · Aos 10+1

Zzcentury · Published 2026-05-12 · Updated 2026-05-12 · CVE-2026-44856

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions AOS-8 (affected versions not specified) AOS-10 (affected versions not specified)

Description Stack-based buffer overflow issues exist in several underlying management service components accessed through the command-line interface. An authenticated attacker with administrative privileges can exploit these by sending specially crafted requests to the affected services, potentially leading to arbitrary code execution with elevated privileges on the underlying operating system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Stack Overflow

Weakness Enumeration

CWE-121

Related Identifiers

CVE-2026-44856

Affected Products

Aos 10

Aos-8

References · 3

• https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05048en_us&docLocale=en_US · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-44856 · Security Note
• https://twitter.com/CVEnew/status/2054340941318598927 · Twitter Post