What is the CVSS score of EUVD-2026-29811?

EUVD-2026-29811 has a CVSS 3.1 base score of 7.2 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of Aruba AOS are affected by EUVD-2026-29811?

HPE Aruba Networking's wireless operating systems (AOS-8 and AOS-10) contain a command execution vulnerability allowing authenticated administrators to inject SQL and execute arbitrary OS commands…

How to fix or mitigate EUVD-2026-29811?

Within 24 hours, identify and inventory all HPE Aruba Networking AOS-8 and AOS-10 deployments and document which personnel hold administrative privileges. Over the next seven days, implement strict access controls limiting administrator privileges to essential staff only, enable comprehensive logging for all administrative CLI and management protocol access, and configure alerts for SQL injection patterns in backend service logs. Within 30 days, monitor HPE security advisories for patch availability and establish a timeline for applying updates immediately upon release; avoid relying on compensating controls as a permanent substitute for vendor patching.

Aruba AOS EUVD-2026-29811

| CVE-2026-44861 HIGH

SQL Injection (CWE-89)

2026-05-12 hpe

GHSA-8xm6-v26m-8mrc

SQLi Hpe Aruba Networking Wireless Operating System Aos Hewlett Packard Enterprise Hpe

7.2

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.2 HIGH

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

vuln.today AI

7.2 HIGH

Network-reachable management interface (AV:N/AC:L) but requires existing administrator privileges (PR:H); arbitrary OS command execution yields full C/I/A impact on the same host (S:U).

3.1 AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

4.0 AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from NVD.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Jul 23, 2026 - 19:53 vuln.today

CVE Published

May 12, 2026 - 19:06 nvd

HIGH 7.2

DescriptionCVE.org

SQL injection vulnerabilities exist in several underlying service components accessible through the AOS-8 and AOS-10 command-line interface and management protocol. An authenticated attacker with administrative privileges could exploit these vulnerabilities by injecting crafted input into parameters that are passed unsanitized to backend database queries. Successful exploitation could allow the attacker to execute arbitrary commands on the underlying operating system.

AnalysisAI

Command execution in HPE Aruba Networking Wireless Operating System (AOS-8 and AOS-10) allows an authenticated administrator to inject SQL into several backend service components reachable via the CLI and management protocol, ultimately running arbitrary OS-level commands. The flaw affects multiple 8.x and 10.x AOS branches and carries CVSS 7.2; there is no public exploit identified at time of analysis, and the EPSS score is very low (0.03%, 8th percentile). CISA's SSVC framework rates exploitation as none but technical impact as total, reflecting high potential damage if the high-privilege prerequisite is met.

Technical ContextAI

AOS is HPE Aruba's wireless controller/gateway operating system powering enterprise WLAN infrastructure (mobility controllers, gateways, and access-point management). The affected surface is a set of underlying service components that accept input through the administrative CLI and management protocol and pass parameters unsanitized into backend database queries. The root cause is CWE-89 (Improper Neutralization of Special Elements used in an SQL Command), a classic SQL injection where attacker-controlled parameters break query context; here the injection escalates beyond data-tier impact into arbitrary command execution on the host OS, indicating the affected database interface can influence system command paths. The single CPE, cpe:2.3:a:hewlett_packard_enterprise_(hpe):hpe_aruba_networking_wireless_operating_system_(aos), confirms the AOS platform as the sole affected product.

RemediationAI

Patch available per vendor advisory: consult HPE security bulletin hpesbnw05048en_us (https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05048en_us&docLocale=en_US) and upgrade each AOS branch to the fixed release above its listed vulnerable ceiling (e.g. beyond 8.10.0.21, 8.12.0.6, 8.13.1.1, 10.4.1.10, 10.7.2.2, and the 10.8.0.0 line); exact patched build numbers should be taken from the HPE bulletin rather than inferred. Because exploitation requires administrative privileges, the most effective compensating control until patching is to tighten management-plane access: restrict CLI and management-protocol reachability to a dedicated, firewalled out-of-band management network and trusted admin hosts only, which reduces exposure but requires that operators connect through the management VLAN. Additionally, enforce role-based administration and strong/MFA-protected admin credentials and audit admin accounts, since the vulnerability is only reachable by authenticated administrators - the trade-off is operational overhead but no functional loss.