PT-2026-40383 · Aruba · Aos-10 Gateway

Zzcentury · Published 2026-05-12 · Updated 2026-05-12 · CVE-2026-44874

Positive Technologies (AI Summary)

CVSS v3.1

4.9

Medium

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions AOS-10 Gateway (affected versions not specified)

Description A flaw in the web-based management interface allows an authenticated remote attacker to access sensitive files on the underlying operating system. This could lead to the disclosure of confidential system information, which may facilitate further attacks against the device.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2026-44874

Affected Products

Aos-10 Gateway

References · 4

• https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05048en_us&docLocale=en_US · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-44874 · Security Note
• https://twitter.com/infoflowcloud/status/2054324761145086075 · Twitter Post
• https://twitter.com/CVEnew/status/2054324093672104352 · Twitter Post