CVE-2026-44855: Authenticated Stack-Based Buffer Overflow in PAPI Services
Stack-based buffer overflow vulnerabilities exist in several underlying management service components accessed through the command-line interface of the AOS-8 and AOS-10 Operating Systems. An authenticated attacker with administrative privileges could exploit these vulnerabilities by sending specially crafted requests to the affected services. Successful exploitation could allow the attacker to execute arbitrary code with elevated privileges on the underlying operating system.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-44855?
CVE-2026-44855 has been assigned a high severity rating due to its potential for exploitation through stack-based buffer overflow.
How do I fix CVE-2026-44855?
To mitigate CVE-2026-44855, update the affected versions of the AOS to the latest patched release provided by Aruba Networks.
Which versions are affected by CVE-2026-44855?
CVE-2026-44855 affects AOS versions 8 and 10, specifically versions prior to 8.10.0.22 and specific range versions up to 10.7.2.3.
Who is vulnerable to CVE-2026-44855?
Authenticated users with administrative privileges on affected Aruba Networks management service components are vulnerable to CVE-2026-44855.
What type of vulnerability is CVE-2026-44855?
CVE-2026-44855 is classified as a stack-based buffer overflow vulnerability in PAPI Services.