SQL Injection Vulnerability in HPE AOS Command-Line Interface

CVE-2026-44861

What is CVE-2026-44861?

Several SQL injection vulnerabilities have been identified in the command-line interface and management protocol of HPE AOS-8 and AOS-10. These vulnerabilities can be exploited by authenticated attackers with administrative privileges who can inject malicious inputs into unsanitized parameters. Successful exploitation may enable attackers to execute arbitrary commands on the underlying operating system, posing significant risks to the integrity and availability of affected environments.

References