CVE-2026-44879

Received Received - Intake

Command Injection in ECOS CLI

Publication date: 2026-07-21

Last updated on: 2026-07-21

Assigner: Hewlett Packard Enterprise (HPE)

Description

A vulnerability in the command line interface of ECOS devices could allow a highly privileged, authenticated remote attacker to perform command injection on certain CLI commands. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-21

Last Modified

2026-07-21

Generated

2026-07-22

AI Q&A

2026-07-22

EPSS Evaluated

N/A

NVD

CVE-2026-44879

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability allows a highly privileged remote attacker to execute arbitrary commands on ECOS devices through command injection in the CLI. It requires authentication but can be exploited remotely.

Impact Analysis

An attacker could gain full control over the affected device, leading to data theft, system compromise, or disruption of services. This could impact confidentiality, integrity, and availability of the system.

Compliance Impact

This vulnerability could lead to unauthorized access, violating data protection requirements in GDPR and HIPAA. Organizations may face compliance penalties due to potential data breaches.

Mitigation Strategies

Immediately restrict remote access to ECOS devices CLI to trusted networks and users. Disable or remove unnecessary CLI commands that may be vulnerable. Apply vendor patches or updates if available. Monitor network traffic for unusual command injection attempts.

Hi! I’m here to help you understand CVE-2026-44879. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70