VulnSocial

CVE-2026-44863Disclosure(arubanetworks / arubaos)

LOWCVSS 7.2 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

SQL injection vulnerabilities exist in several underlying service components accessible through the AOS-8 and AOS-10 command-line interface and management protocol. An authenticated attacker with administrative privileges could exploit these vulnerabilities by injecting crafted input into parameters that are passed unsanitized to backend database queries. Successful exploitation could allow the attacker to execute arbitrary commands on the underlying operating system.

arubanetworks CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-89

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • arubaos
  • sd-wan

Threat summary

  • 2 mentions across 1 observed day

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 2 classified signals
  • 2 total mentions across 1 day

Affected systems

Vendors
arubanetworks
Products
arubaossd-wan

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-05-12: 2Technical Details · 2026-05-12: 205-12
Signal classification1 categories
Disclosure
2100.0%
Referenced assets2 URLs
By indicator
Full discourse2 posts
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-44863 SQL injection vulnerabilities exist in several underlying service components accessible through the AOS-8 and AOS-10 command-line interface and management protocol. A… https://www.cve.org/CVERecord?id=CVE-2026-44863 ----- Traducción: Las vulnerabilidad… http://infoflow.cloud`

    Post summary

    CVE-2026-44863 describes SQL injection vulnerabilities in the AOS-8/AOS-10 CLI and management protocol; no PoC, exploit code, or patch information is provided.

    0001038
    77 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-44863 SQL injection vulnerabilities exist in several underlying service components accessible through the AOS-8 and AOS-10 command-line interface and management protocol. A… https://www.cve.org/CVERecord?id=CVE-2026-44863

    Post summary

    A new SQL injection vulnerability (CVE-2026-44863) is announced, affecting AOS-8/AOS-10 CLI and management protocol, but no PoC, exploit code, patch, or active exploitation details are provided.

    00000157
    57.5K followersView on X
CPE platform detail2 entries

2 of 2 entries

PartVendorProductVersionTarget SWTarget HW
OSarubanetworksarubaos---
Apparubanetworkssd-wan---

Explore more

Back to dashboardarubanetworks CVEsarubaos vulnerabilities