What is the CVSS score of CVE-2026-44874?

CVE-2026-44874 has a CVSS 3.1 base score of 4.9 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N. EPSS exploitation probability: 0.0%.

HPE Aruba AOS CVE-2026-44874

EUVD-2026-29823 MEDIUM

Improper Access Control (CWE-284)

2026-05-12 hpe

GHSA-hcvx-68gw-vvxp

Authentication Bypass Hpe Aruba Networking Wireless Operating System Aos Hewlett Packard Enterprise Hpe

4.9

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

4.9 MEDIUM

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

vuln.today AI

4.9 MEDIUM

Web management interface is network-reachable with low complexity, but PR:H reflects mandatory admin authentication; only confidentiality is impacted via OS file read.

3.1 AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

4.0 AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Primary rating from NVD.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

Analysis Generated

Jul 23, 2026 - 19:44 vuln.today

CVE Published

May 12, 2026 - 19:19 nvd

MEDIUM 4.9

DescriptionCVE.org

A vulnerability exists in the web-based management interface of an AOS-10 Gateway that could allow an authenticated remote attacker to access sensitive files on the underlying operating system. Successful exploitation of this vulnerability could result in the disclosure of confidential system information, potentially enabling further attacks against the affected device.

AnalysisAI

Sensitive OS file disclosure in the HPE Aruba Networking AOS-10 Gateway web management interface allows authenticated remote administrators to read arbitrary files on the underlying operating system. Affected version ranges span AOS 10.4.0.0-10.4.1.10, 10.7.0.0-10.7.2.2, and 10.8.0.0. No public exploit code exists and EPSS sits at 0.03% (11th percentile), with SSVC confirming no observed exploitation - risk is primarily from compromised admin credentials or insider threats rather than opportunistic attack.

Technical ContextAI

The vulnerability resides in the web-based management interface of HPE Aruba Networking Wireless Operating System (AOS) version 10, deployed on AOS-10 Gateway hardware (CPE: cpe:2.3:a:hewlett_packard_enterprise_(hpe):hpe_aruba_networking_wireless_operating_system_(aos):*:*:*:*:*:*:*:*). CWE-284 (Improper Access Control) identifies the root cause as insufficient enforcement of file system access restrictions within the web interface layer - the management application fails to confine authenticated requests to intended paths, allowing traversal into OS-level files. This is a management-plane weakness in the AOS-10 networking OS, distinct from data-plane vulnerabilities; the affected surface is the HTTP(S) administrative interface rather than wireless traffic handling or forwarding logic.

RemediationAI

Administrators should consult the HPE security bulletin at https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05048en_us&docLocale=en_US for exact patched version numbers and upgrade instructions - specific fix versions were not independently confirmed from available data and should not be inferred. As a compensating control pending patching, restrict the web management interface to a dedicated, isolated out-of-band management network or enforce access only through privileged-access workstations (PAWs) or jump hosts using ACLs; this eliminates network reachability for all but explicitly authorized management sessions. Where operationally feasible, disabling the web-based management interface in favor of CLI-only access (SSH) removes the vulnerable surface entirely, though this may impact operational workflows that depend on the GUI. Enforce multi-factor authentication on administrator accounts to raise the bar against credential compromise, which is the primary realistic enabler of this vulnerability.