CVE-2026-44857: Authenticated Stack-Based Buffer Overflow in PAPI Services
Stack-based buffer overflow vulnerabilities exist in several underlying management service components accessed through the command-line interface of the AOS-8 and AOS-10 Operating Systems. An authenticated attacker with administrative privileges could exploit these vulnerabilities by sending specially crafted requests to the affected services. Successful exploitation could allow the attacker to execute arbitrary code with elevated privileges on the underlying operating system.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-44857?
CVE-2026-44857 is classified as a high severity vulnerability due to the risk of authenticated stack-based buffer overflow.
How do I fix CVE-2026-44857?
To fix CVE-2026-44857, update your AOS-8 or AOS-10 Operating System to the latest patched version provided by Aruba Networks.
Which systems are affected by CVE-2026-44857?
CVE-2026-44857 affects the AOS-8 and AOS-10 Operating Systems, as well as specific versions of Arubanetworks ArubaOS and SD-WAN.
What type of attack does CVE-2026-44857 allow?
CVE-2026-44857 allows an authenticated attacker with administrative privileges to execute arbitrary code via a stack-based buffer overflow.
Is CVE-2026-44857 exploitable remotely?
CVE-2026-44857 requires authenticated access, thus it is not exploitable remotely without valid administrative credentials.