CVE-2026-44878: Aruba Authenticated Path Traversal allows Unauthorized Access in Web Interface
This Aruba advisory covers CVE-2026-44878 in ECOS.
- CVE-2026-44878
Key facts
- Vendor rating
- High, CVSS 7.2
- CISA KEV
- Not listed (catalogue checked )
- Affected
- ECOS 9.4.0.0 through 9.4.6.0; ECOS 9.5.0.0 through 9.5.6.0; ECOS 9.6.0.0 through 9.6.1.0
- Fixed in
- ECOS 9.4.7.0 or above, ECOS 9.5.7.0 or above, ECOS 9.6.2.0 or above and 1 more below
- Source published
- Source revised
- Listed by VulniPulse
Compiled by VulniPulse from the linked sources. How records are collected and checked.
Affected products & platforms
Description
A vulnerability in the web-based management interface of an ECOS device could allow a highly privileged, authenticated remote attacker to access the device's filesystem. Successful exploitation of this vulnerability could allow an attacker to access sensitive files and tamper with or delete system data.
Affected product named by the advisory: EdgeConnect SD-WAN Gateway (ECOS).
Text from the source record.
- ECOS 9.4.0.0 through 9.4.6.0
- ECOS 9.5.0.0 through 9.5.6.0
- ECOS 9.6.0.0 through 9.6.1.0
Official advisory · high-confidence parse· fetched ·verify at source
How to fix CVE-2026-44878
Upgrade to a fixed release named by Aruba:
- ECOS 9.4.7.0 or above
- ECOS 9.5.7.0 or above
- ECOS 9.6.2.0 or above
- ECOS 9.7.0.0 or above
Vendor guidance
- Upgrade affected HPE Aruba Networking devices to an applicable fixed release: ECOS 9.4.7.0 or above, ECOS 9.5.7.0 or above, ECOS 9.6.2.0 or above, ECOS 9.7.0.0 or above.
- HPE Aruba Networking recommends that customers upgrade their EdgeConnect SD-WAN Gateways to one of the following ECOS software versions to resolve this vulnerability: ECOS 9.4.7.0 and above, ECOS 9.5.7.0 and above, ECOS 9.6.2.0 and above, ECOS 9.7.0.0 and above.
Workarounds
- To minimize the likelihood of an attacker exploiting this vulnerability, HPE Aruba Networking recommends that management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above, along with accounting controls for tracking and logging user activities and resource usage. You may contact HPE Services - HPE Aruba Networking for assistance if needed. For more information, please visit HPE Networking Support Portal at https://networkingsupport.hpe.com/home. NOTE: HPE Aruba Networking recommends using RADIUS or TACACS for ECOS user authentication and routing management plane traffic through secure SD-WAN tunnels whenever feasible to strengthen the security and integrity of management communications.
More HPE Aruba Networking advisories
CVE-2026-44879Jul 21, 2026Authenticated Command Injection allows arbitrary command execution in CLI InterfaceCVE-2026-95730Nov 3, 2026Authenticated Buffer OverflowCVE-2026-95729Nov 3, 2026Authenticated Sensitive Information Disclosure in VIACVE-2026-95728Nov 3, 2026Virtual Intranet Access: arbitrary file write vulnerability exists in the Virtual IntranetCVE-2026-95727Nov 3, 2026Authenticated Command Injection Vulnerability in HPE Networking VIACVE-2026-95726Nov 3, 2026Unauthenticated Buffer Overflow
HPE Aruba Networking advisories, July 2026All HPE Aruba Networking advisories
Get an email when Aruba publishes the next one.
See Aruba's last 90 days of advisories first. Then choose one product with live alerts free for life, or a free month of real-time alerts on everything with the severity, the fixed version and the vendor's link (card needed, then US$15/month; we email you before the first charge).
iPhone and Android apps · New on the App Store
Monitor future HPE Aruba Networking CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.
