CVE-2026-44874: A vulnerability exists in the web-based management interface of an AOS-10 Gateway that could allow an authenticated remote attacker to access sensitive files…

PriorityP428medium4.9CVSS 3.1

AVNACLPRHUINSUCHINAN

EPSS

0.30%

23.5th percentile

A vulnerability exists in the web-based management interface of an AOS-10 Gateway that could allow an authenticated remote attacker to access sensitive files on the underlying operating system. Successful exploitation of this vulnerability could result in the disclosure of confidential system information, potentially enabling further attacks against the affected device.

Affected

6 ranges

Vendor	Product	Version range	Fixed in
arubanetworks	arubaos	—	—
arubanetworks	arubaos	>= 10.4.0.0 < 10.4.1.11	10.4.1.11
arubanetworks	arubaos	>= 10.5.0.0 < 10.7.2.3	10.7.2.3
hewlett_packard_enterprise	hpe_aruba_networking_wireless_operating_system	—	—
hewlett_packard_enterprise	hpe_aruba_networking_wireless_operating_system	10.4.0.0 – 10.4.1.10	—
hewlett_packard_enterprise	hpe_aruba_networking_wireless_operating_system	10.7.0.0 – 10.7.2.2	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.