Vendor
Hewlett Packard Enterprise (HPE)
- CVEs tracked · all time
- 41
- in CISA KEV · all time
- 0
- articles · since 11 Sep
- 7
- articles · all time
- 17
7 articles since 11 Sep.
Show as table
| Day (UTC) | Articles |
|---|---|
| Wed 16 Sep | 1 |
| Wed 23 Sep | 1 |
| Wed 30 Sep | 1 |
| Wed 7 Oct | 2 |
| Fri 9 Oct | 1 |
| Fri 23 Oct | 1 |
Products: ALE, AOS-CX, AOS-Switch (AOS-S), ClearPass Policy Manager (CPPM) and 6 more
ALEAOS-CXAOS-Switch (AOS-S)ClearPass Policy Manager (CPPM)EdgeConnect SD-WAN GatewaysEdgeConnect SD-WAN OrchestratorFabric ComposerHPE Integrated Lights-Out (iLO) 7Instant ONUnknown product
CVEs
41 CVEs, the 40 listed known exploited firstCVE-2026-79848Unauthenticated SQL Injection Vulnerabilities allow Remote Code Execution in AOS-8CVSS10.0Critical–Not in KEV0.7%EPSS1article
CVE-2026-79847Unauthenticated Buffer Overflow Vulnerabilities leads to Remote Code Execution in AOS-10CVSS10.0Critical–Not in KEV0.8%EPSS1article
CVE-2026-79846Unauthenticated Command Injection Vulnerabilities in AOS-8CVSS10.0Critical–Not in KEV1.4%EPSS1article
CVE-2026-79844Authentication Bypass Leading to Remote Code Execution in AOS-10CVSS10.0Critical–Not in KEV0.7%EPSS1article
CVE-2026-79852Unauthenticated SQL Injection allows Remote Code Execution in AOS Web-Based Management InterfaceCVSS9.8Critical–Not in KEV0.5%EPSS1article
CVE-2026-79842Hewlett Packard Enterprise HPE Intelligent Management Center (iMC) vulnerabilityCVSS9.1Critical–Not in KEV0.3%EPSS1article
CVE-2026-79820Hewlett Packard Enterprise (HPE) HPE Integrated Lights-Out (iLO) 7 vulnerabilityCVSS9.0Critical–Not in KEV0.3%EPSS1article
CVE-2026-79798Authenticated SQL Injection Vulnerabilities in ClearPass Policy Manager Web-Based Management InterfaceCVSS9.9Critical–Not in KEV0.3%EPSS1article
CVE-2026-76751Missing Integrity Verification in the OnGuard Agent of ClearPass Policy Manager Allows Unauthenticated Remote Code ExecutionCVSS9.8Critical–Not in KEV0.3%EPSS1article
CVE-2026-76754Unauthenticated SQL Injection Vulnerability leads to Remote Code Execution in ClearPass Policy ManagerCVSS9.8Critical–Not in KEV0.4%EPSS1article
CVE-2026-76753Unauthenticated Format String Vulnerability in HPE Networking ClearPass Policy ManagerCVSS9.8Critical–Not in KEV0.5%EPSS1article
CVE-2026-76752Authentication Bypass Vulnerabilities in HPE Networking ClearPass Policy Manager Allow Unauthorized Administrative AccessCVSS9.8Critical–Not in KEV0.5%EPSS1article
28 more CVEs
CVE-2026-76750Unauthenticated Deserialization of Untrusted Data allows Remote Code Execution in the Web Interface of HPE Networking ClearPass Policy ManagerCVSS9.8Critical–Not in KEV0.5%EPSS1article
CVE-2026-76743Authentication Bypass Vulnerability in the Management Interface of AOS-SCVSS9.8Critical–Not in KEV0.6%EPSS1article
CVE-2026-76742Authentication Bypass in the Web Management Interface of AOS-SCVSS9.8Critical–Not in KEV0.6%EPSS1article
CVE-2026-76744Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-SCVSS9.8Critical–Not in KEV0.5%EPSS1article
CVE-2026-76745Unauthenticated Adjacent Memory Corruption Vulnerabilities Leading to Remote Code Execution in AOS-SCVSS9.6Critical–Not in KEV0.2%EPSS1article
CVE-2026-76746Unauthenticated Adjacent Buffer Overflow Vulnerability Leading to Information Disclosure in AOS-SCVSS9.3Critical–Not in KEV0.2%EPSS1article
CVE-2026-76747Unauthenticated Buffer Overflow Vulnerabilities lead to Information Disclosure in AOS-SCVSS9.1Critical–Not in KEV0.5%EPSS1article
CVE-2026-76722Uncontrolled Format String Vulnerabilities lead to Remote Code Execution or Denial-of-Service in HPE Networking Instant ON APsCVSS9.8Critical–Not in KEV0.5%EPSS1article
CVE-2026-76721Unauthenticated Buffer Overflow Vulnerability leads to Remote Code Execution in HPE Networking Instant ON APsCVSS9.8Critical–Not in KEV0.6%EPSS1article
CVE-2026-76725Authentication Bypass in a Management Protocol of HPE Networking Instant ON APsCVSS9.6Critical–Not in KEV0.3%EPSS1article
CVE-2026-76724Unauthenticated Adjacent Command Injection Vulnerability in HPE Networking Instant ON APs Command Line Interface (CLI) Accessed by the PAPI ProtocolCVSS9.6Critical–Not in KEV1.0%EPSS1article
CVE-2026-76723Unauthenticated Adjacent Buffer Overflow Vulnerabilities lead to Remote Code Execution in HPE Networking Instant ON APSCVSS9.6Critical–Not in KEV0.3%EPSS1article
CVE-2026-76726Authentication Bypass Leading to Unauthorized Network Access in HPE Networking Instant ON API EndpointCVSS8.1High–Not in KEV0.4%EPSS1article
CVE-2026-76709Unauthenticated Remote Arbitrary File Write Vulnerability in HPE Networking Analytics and Location Engine (ALE)CVSS9.8Critical–Not in KEV0.6%EPSS1article
CVE-2026-76708Unauthenticated Remote Unauthorized Access Vulnerability in HPE Networking Analytics and Location Engine (ALE)CVSS9.8Critical–Not in KEV0.6%EPSS1article
CVE-2026-76711Unauthenticated Remote Data Injection Vulnerability in HPE Networking Analytics and Location Engine (ALE)CVSS7.5High–Not in KEV0.5%EPSS1article
CVE-2026-76717Unauthenticated Remote Sensitive Information Disclosure Vulnerability in HPE Networking Analytics and Location Engine (ALE)CVSS5.3Medium–Not in KEV0.4%EPSS1article
CVE-2026-76669Authorization Bypass Leading to Privilege Escalation in EdgeConnect SD-WAN OrchestratorCVSS9.9Critical–Not in KEV0.5%EPSS1article
CVE-2026-76670Authorization Bypass Leading to Privilege Escalation in EdgeConnect SD-WAN OrchestratorCVSS9.9Critical–Not in KEV0.5%EPSS1article
CVE-2026-76674Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in HPE Networking EdgeConnect SD-WAN GatewaysCVSS9.8Critical–Not in KEV1.0%EPSS1article
CVE-2026-76673Authentication Bypass Vulnerabilities in API of EdgeConnect SD-WAN OrchestratorCVSS9.8Critical–Not in KEV0.6%EPSS1article
CVE-2026-73749Hewlett Packard Enterprise (HPE) AOS-CX vulnerabilityCVSS9.8Critical–Not in KEV0.8%EPSS3articles
CVE-2026-76658Unauthenticated Remote Code Execution in HPE Networking Fabric Composer SSH DaemonCVSS10.0Critical–Not in KEV0.8%EPSS1article
CVE-2026-76657Authentication Bypass in HPE Networking Fabric Composer API allows Administrative AccessCVSS10.0Critical–Not in KEV0.8%EPSS1article
CVE-2026-63456Authentication bypass via spoofed HTTP headers Orchestrator REST APICVSS9.8Critical–Not in KEV0.8%EPSS1article
CVE-2026-63455Authentication bypass via spoofed HTTP headers Orchestrator REST APICVSS9.8Critical–Not in KEV0.8%EPSS1article
CVE-2026-23813Authentication Bypass in Web Interface allows Unauthenticated Admin Password ResetCVSSUnrated–Not in KEV0.8%EPSS3articles
CVE-2026-23595Unauthenticated Authentication Bypass in application API allows unauthorized administrative account creationCVSSUnrated–Not in KEV0.3%EPSS1article
- HPE Patches 72 Wi-Fi Flaws, Including Critical Remote Code BugsSecurityOnline
- HPE Patches Critical Flaws That Could Expose Server Management ToolsSecurityOnline
- HPE Urges Urgent Patching for 28 Critical ClearPass FlawsSecurityOnline
- HPE Patches Critical AOS-Switch Flaws That Could Expose NetworksSecurityOnline
- HPE Patches Critical Flaws Enabling Remote Code Execution in Wi-Fi Access PointsSecurityOnline
- HPE Fixes ALE Flaws That Could Let Attackers Take Over ServersSecurityOnline
- HPE Fixes Critical SD-WAN Flaws Enabling Remote Admin AccessSecurityOnline
- HPE Patches Critical ArubaOS-CX Flaw Enabling Unauthenticated RCESecurityWeek
- HPE Patches Critical ArubaOS-CX Flaws Enabling Remote Code ExecutionSecurityWeek
- CVE-2026-73749: Unauth RCE in HPE Networking AOS-CX Scores 9.8SecurityOnline
- HPE Fabric Composer Vulnerabilities Expose Critical SystemsSecurityOnline
- CVE-2026-63455: EdgeConnect Orchestrator Web Authentication Bypass Rated CVSS 9.8SecurityOnline
- Critical HPE AOS-CX Vulnerability Allows Admin Password ResetsSecurityWeek
- Dozens of Vendors Patch Security Flaws Across Enterprise Software and Network DevicesThe Hacker News
- Hewlett Packard Enterprise fixes critical authentication bypass in Aruba AOS-CXSecurity Affairs
- 5G Core Breach: Critical HPE Aruba Flaw Allows Unauthenticated Admin TakeoverSecurityOnline
- HPE Aruba Patches High-Severity RCE and OpenSSL FlawsSecurityOnline · first in our coverage