Aruba Security Updates – 22 July 2026

The addressed vulnerabilities could allow the attacker to conduct denial-ofservice, cross-site scripting, and server-side request forgery attacks, trigger memory corruption, obtain sensitive information, gain elevated privileges, manipulate files, bypass security restrictions, execute arbitrary code/commands, and gain access to the affected systems.

Sample of the addressed vulnerabilities:

1. HPE Aruba Networking AOS-CX Low-Privilege Authenticated Buffer Overflow Vulnerability (CVE-2026-44880):

• CVSS: 8.8
• Attack Vector: Network
• Attack Complexity: Low
• Privileges Required: Low
• User Interaction: None
• Consequences: Remote Code Execution

2. HPE Aruba Networking EdgeConnect SD-WAN Gateways Authenticated Path Traversal in Web Interface Vulnerability (CVE-2026-44878):

• CVSS: 7.2
• Attack Vector: Network
• Attack Complexity: Low
• Privileges Required: High
• User Interaction: None
• Consequences: Obtain Information

Sample of the affected products:

• Aruba Networking AOS-CX.
• Aruba Networking EdgeConnect SD-WAN Gateways.
• HPE Telco Automated Assurance and HPE Telco Intelligent Assurance.
• HPE Telco Service Orchestrator.