AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

Hewlett Packard EnterpriseCVE-2026-44878

Hewlett Packard Enterprise EdgeConnect SD-WAN Gateway: insecure permissions

Hewlett Packard Enterprise

CVE-2026-44878 · Published Jul 21, 2026 · updated Jul 23, 2026

High7.2
No fix yet
Hewlett Packard Enterprise advisory

A vulnerability in the web-based management interface of an ECOS device could allow a highly privileged, authenticated remote attacker to access the device's filesystem. Successful exploitation of this vulnerability could allow an attacker to access sensitive files and tamper with or delete system data.

Affected versions

PackageAffectedFixed in
EdgeConnect SD-WAN Gateway (ECOS)
Product
>= 9.4.0.0, <= 9.4.6.0No fix yet
>= 9.5.0.0, <= 9.5.6.0No fix yet
>= 9.6.0.0, <= 9.6.1.0No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-377, CWE-732

More Hewlett Packard Enterprise advisories

All Hewlett Packard Enterprise
Critical 9.8Aug 4Hewlett Packard Enterprise EdgeConnect: information disclosureCVE-2026-63456no fix yetHigh 7.2Jul 21Hewlett Packard Enterprise EdgeConnect SD-WAN Gateway (ECOS): command injectionCVE-2026-44879no fix yetHigh 7.2Jul 21Hewlett Packard Enterprise AOS-CX: buffer overflowCVE-2026-63453fixed in 10.18.0001High 7.2Jul 21Hewlett Packard Enterprise AOS-CX: path traversalCVE-2026-63454fixed in 10.18.0001High 8.8Jul 21Hewlett Packard Enterprise AOS-CX: buffer overflowCVE-2026-44880fixed in 10.18.0001Medium 6.5Jul 7Hewlett Packard Enterprise HPE Networking Instant On: information disclosureCVE-2026-44877no fix yet