VulnSocial

CVE-2026-44864Disclosure(arubanetworks / arubaos)

LOWCVSS 7.2 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

SQL injection vulnerabilities exist in several underlying service components accessible through the AOS-8 and AOS-10 command-line interface and management protocol. An authenticated attacker with administrative privileges could exploit these vulnerabilities by injecting crafted input into parameters that are passed unsanitized to backend database queries. Successful exploitation could allow the attacker to execute arbitrary commands on the underlying operating system.

arubanetworks CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-89

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • arubaos
  • sd-wan

Threat summary

  • 2 mentions across 1 observed day

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 1 classified signal
  • General: 1 classified signal
  • 2 total mentions across 1 day

Affected systems

Vendors
arubanetworks
Products
arubaossd-wan

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-05-12: 2Technical Details · 2026-05-12: 205-12
Signal classification2 categories
Disclosure
150.0%
General
150.0%
Referenced assets2 URLs
By indicator
Full discourse2 posts
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-44864 SQL injection vulnerabilities exist in several underlying service components accessible through the AOS-8 and AOS-10 command-line interface and management protocol. A… https://www.cve.org/CVERecord?id=CVE-2026-44864 ----- Traducción: Las vulnerabilidad… http://infoflow.cloud`

    Post summary

    A brief notice that CVE-2026-44864 is an SQL injection issue impacting AOS-8 and AOS-10 CLI/management protocol, with no further exploit or remediation details.

    0000027
    77 followersView on X
  • CVE@CVEnew
    General

    CVE-2026-44864 SQL injection vulnerabilities exist in several underlying service components accessible through the AOS-8 and AOS-10 command-line interface and management protocol. A… https://www.cve.org/CVERecord?id=CVE-2026-44864

    Post summary

    The statement reports that CVE-2026-44864 is a SQL injection issue affecting AOS‑8/AOS‑10 CLI components, but provides no PoC, exploit code, patch, or evidence of active exploitation.

    00000151
    57.5K followersView on X
CPE platform detail2 entries

2 of 2 entries

PartVendorProductVersionTarget SWTarget HW
OSarubanetworksarubaos---
Apparubanetworkssd-wan---

Explore more

Back to dashboardarubanetworks CVEsarubaos vulnerabilities