CVE-2026-44880: arubaos-cx through 10.13.1170 (inclusive), from 10.16.0000 (inclusive), through 10.16.1050 (inclusive), from…

Affected technology

arubaos-cx · through 10.13.1170 (inclusive)
hpe

arubaos-cx · from 10.16.0000 (inclusive), through 10.16.1050 (inclusive)
hpe

arubaos-cx · from 10.17.0000 (inclusive), through 10.17.1020 (inclusive)
hpe

arubaos-cx · from 10.18.0000 (inclusive), through 10.18.0001 (inclusive)
hpe

AOS-CX · 10.17.0000 through 10.17.1020, 10.16.0000 through 10.16.1050, 10.13.0000 through 10.13.1170, 10.18.0000 to before 10.18.0001
Hewlett Packard Enterprise (HPE)

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 3.1): Network (remote) · Low privileges required · No user interaction required

What an attacker can do

An remote low-privileged user could execute arbitrary code as a privileged user on the underlying operating system. Vendor/CNA’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high.