目標達成 すべての支援者に感謝 — 100%達成しました！

目標: 1000 CNY · 調達済み: 1310 CNY

100%
コーヒーを一杯おごる

CVE-2026-44865— HPE Aruba Networking Wireless Operating System 安全漏洞

CVSS 7.2 · High EPSS 0.21% · P44

Affected Version Matrix 6

ベンダープロダクトVersion Rangeステータス
Hewlett Packard Enterprise (HPE)HPE Aruba Networking Wireless Operating System (AOS)8.13.0.0≤ 8.13.1.1affected
8.12.0.0≤ 8.12.0.6affected
8.10.0.0≤ 8.10.0.21affected
10.7.0.0≤ 10.7.2.2affected
10.8.0.0affected
10.4.0.0≤ 10.4.1.10affected
新しい脆弱性情報の通知を購読するログインして購読

I. CVE-2026-44865の基本情報

脆弱性情報
脆弱性についてご質問がありますか？Shenlongの分析が参考になるかご確認ください！
Shenlongの10の質問を表示 ↗

高度な大規模言語モデル技術を使用していますが、出力には不正確または古い情報が含まれる可能性があります。Shenlongはデータの正確性を確保するよう努めていますが、実際の状況に基づいて検証・判断してください。

脆弱性タイトル
Authenticated Command Injection Vulnerabilities in the Web-Based Management Interface of AOS-8 and AOS-10
ソース: NVD (National Vulnerability Database)
脆弱性説明
Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Successful exploitation of these vulnerabilities could allow an authenticated remote attacker to execute arbitrary commands on the underlying operating system.
ソース: NVD (National Vulnerability Database)
CVSS情報
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
ソース: NVD (National Vulnerability Database)
脆弱性タイプ
N/A
ソース: NVD (National Vulnerability Database)
脆弱性タイトル
HPE Aruba Networking Wireless Operating System 安全漏洞
ソース: CNNVD (China National Vulnerability Database)
脆弱性説明
HPE Aruba Networking Wireless Operating System是美国HPE公司的一个无线网络操作系统。 HPE Aruba Networking Wireless Operating System存在安全漏洞，该漏洞源于基于Web的管理接口存在命令注入，可能导致经过身份验证的远程攻击者在底层操作系统上执行任意命令。
ソース: CNNVD (China National Vulnerability Database)
CVSS情報
N/A
ソース: CNNVD (China National Vulnerability Database)
脆弱性タイプ
N/A
ソース: CNNVD (China National Vulnerability Database)

影響を受ける製品

ベンダープロダクト影響を受けるバージョンCPE購読
Hewlett Packard Enterprise (HPE)HPE Aruba Networking Wireless Operating System (AOS) 8.13.0.0 ~ 8.13.1.1 -

II. CVE-2026-44865の公開POC

#POC説明ソースリンクShenlongリンク
AI生成POCプレミアム

公開POCは見つかりませんでした。

ログインしてAI POCを生成

III. CVE-2026-44865のインテリジェンス情報

请登录查看更多情报信息。

CVE-2026-44865 厂商安全公告 (1)

Same Patch Batch · Hewlett Packard Enterprise (HPE) · 2026-05-12 · 32 CVEs total

CVE-2026-238198.8 HIGHError in SSID Processing allows Stored XSS in Web Management Interface
CVE-2026-238257.5 HIGHUnauthenticated Denial-of-Service via Crafted Messages in a Network Protocol Handling Comp
CVE-2026-238247.5 HIGHUnauthenticated Denial-of-Service via Crafted Messages in a Network Protocol Handling Comp
CVE-2026-238277.5 HIGHUnauthenticated Remote Code Execution via Heap Buffer Overflow in Network Management Servi
CVE-2026-238267.5 HIGHUnauthenticated Denial of Service in AOS-8 Network Management Service
CVE-2026-448607.2 HIGHAuthenticated Remote Code Execution via SQL Injection in AOS-8 and AOS-10 Operating System
CVE-2026-238237.2 HIGHAuthenticated Command Injection leads to RCE in AOS-10 CLI Command
CVE-2026-238207.2 HIGHInconsistent input filtering allows Authenticated Command Injection in AOS-8 Instant and A
CVE-2026-238217.2 HIGHInconsistent input filtering allows Authenticated Command Injection in AOS-10 CLI
CVE-2026-448527.2 HIGHAuthenticated Remote Code Execution via Arbitrary File Overwrite in the AOS-8 and AOS-10 W
CVE-2026-448587.2 HIGHAuthenticated Stack-Based Buffer Overflow in PAPI Services
CVE-2026-448627.2 HIGHAuthenticated Remote Code Execution via SQL Injection in AOS-8 and AOS-10 Operating System
CVE-2026-448547.2 HIGHAuthenticated Remote Code Execution via Arbitrary File Write in AOS-8 and AOS-10 Web-Based
CVE-2026-448667.2 HIGHAuthenticated Command Injection Vulnerabilities in the Web-Based Management Interface of A
CVE-2026-448677.2 HIGHAuthenticated Command Injection Vulnerabilities in the Web-Based Management Interface of A
CVE-2026-448567.2 HIGHAuthenticated Stack-Based Buffer Overflow in PAPI Services
CVE-2026-448637.2 HIGHAuthenticated Remote Code Execution via SQL Injection in AOS-8 and AOS-10 Operating System
CVE-2026-448577.2 HIGHAuthenticated Stack-Based Buffer Overflow in PAPI Services
CVE-2026-448707.2 HIGHAuthenticated Command Injection Vulnerabilities in Command Line Interface (CLI) Service Ac
CVE-2026-448687.2 HIGHAuthenticated Command Injection Vulnerabilities in the Web-Based Management Interface of A

Showing 20 of 32 CVEs. View all on vendor page →

IV. 関連脆弱性

同じ製品: HPE Aruba Networking Wireless Operating System (AOS)
同じベンダー: Hewlett Packard Enterprise (HPE)

V. CVE-2026-44865へのコメント

まだコメントはありません

コメントを残す