Skip to contentHewlett Packard Enterprise (hpe) vulnerabilities
Newest
- arubanetworks arubaos, sd-wan, hewlett packard enterprise (hpe) hpe aruba networking wireless operating system (aos) +2 moreAuthenticated Command Injection Vulnerabilities in the Web-Based Management Interface of AOS-8 and AOS-10CVE-2026-448677.2 High
- arubanetworks arubaos, sd-wan, hewlett packard enterprise (hpe) hpe aruba networking wireless operating system (aos) +2 moreAuthenticated Command Injection Vulnerabilities in the Web-Based Management Interface of AOS-8 and AOS-10CVE-2026-448667.2 High
- arubanetworks arubaos, sd-wan, hewlett packard enterprise (hpe) hpe aruba networking wireless operating system (aos) +2 moreAuthenticated Command Injection Vulnerabilities in the Web-Based Management Interface of AOS-8 and AOS-10CVE-2026-448657.2 High
- arubanetworks arubaos, sd-wan, hewlett packard enterprise (hpe) hpe aruba networking wireless operating system (aos) +2 moreAuthenticated Remote Code Execution via SQL Injection in AOS-8 and AOS-10 Operating SystemsCVE-2026-448647.2 High
- arubanetworks arubaos, sd-wan, hewlett packard enterprise (hpe) hpe aruba networking wireless operating system (aos) +2 moreAuthenticated Remote Code Execution via SQL Injection in AOS-8 and AOS-10 Operating SystemsCVE-2026-448637.2 High
- arubanetworks arubaos, sd-wan, hewlett packard enterprise (hpe) hpe aruba networking wireless operating system (aos) +2 moreAuthenticated Remote Code Execution via SQL Injection in AOS-8 and AOS-10 Operating SystemsCVE-2026-448627.2 High
- arubanetworks arubaos, sd-wan, hewlett packard enterprise (hpe) hpe aruba networking wireless operating system (aos) +2 moreAuthenticated Remote Code Execution via SQL Injection in AOS-8 and AOS-10 Operating SystemsCVE-2026-448617.2 High
- arubanetworks arubaos, sd-wan, hewlett packard enterprise (hpe) hpe aruba networking wireless operating system (aos) +2 moreAuthenticated Remote Code Execution via SQL Injection in AOS-8 and AOS-10 Operating SystemsCVE-2026-448607.2 High
- arubanetworks arubaos, sd-wan, hewlett packard enterprise (hpe) hpe aruba networking wireless operating system (aos) +2 moreAuthenticated Stack-Based Buffer Overflow in PAPI ServicesCVE-2026-448597.2 High
- arubanetworks arubaos, sd-wan, hewlett packard enterprise (hpe) hpe aruba networking wireless operating system (aos) +2 moreAuthenticated Stack-Based Buffer Overflow in PAPI ServicesCVE-2026-448587.2 High
- arubanetworks arubaos, sd-wan, hewlett packard enterprise (hpe) hpe aruba networking wireless operating system (aos) +2 moreAuthenticated Stack-Based Buffer Overflow in PAPI ServicesCVE-2026-448577.2 High
- arubanetworks arubaos, sd-wan, hewlett packard enterprise (hpe) hpe aruba networking wireless operating system (aos) +2 moreAuthenticated Stack-Based Buffer Overflow in PAPI ServicesCVE-2026-448567.2 High
- arubanetworks arubaos, sd-wan, hewlett packard enterprise (hpe) hpe aruba networking wireless operating system (aos) +2 moreAuthenticated Stack-Based Buffer Overflow in PAPI ServicesCVE-2026-448557.2 High
- arubanetworks arubaos, sd-wan, hewlett packard enterprise (hpe) hpe aruba networking wireless operating system (aos) +2 moreAuthenticated Remote Code Execution via Arbitrary File Write in AOS-8 and AOS-10 Web-Based Management InterfaceCVE-2026-448547.2 High
- arubanetworks arubaos, sd-wan, hewlett packard enterprise (hpe) hpe aruba networking wireless operating system (aos) +2 moreAuthenticated Remote Code Execution via Arbitrary File Write in AOS-8 and AOS-10 Web-Based Management InterfaceCVE-2026-448537.2 High
- arubanetworks arubaos, sd-wan, hewlett packard enterprise (hpe) hpe aruba networking wireless operating system (aos) +2 moreAuthenticated Remote Code Execution via Arbitrary File Overwrite in the AOS-8 and AOS-10 Web-Based Management InterfaceCVE-2026-448527.2 High
- arubanetworks arubaos, sd-wan, hewlett packard enterprise (hpe) hpe aruba networking wireless operating system (aos) +2 moreUnauthenticated Remote Code Execution via Heap Buffer Overflow in Network Management ServiceCVE-2026-238277.5 High
- arubanetworks arubaos, sd-wan, hewlett packard enterprise (hpe) hpe aruba networking wireless operating system (aos) +2 moreUnauthenticated Denial of Service in AOS-8 Network Management ServiceCVE-2026-238267.5 High
- arubanetworks arubaos, sd-wan, hewlett packard enterprise (hpe) hpe aruba networking wireless operating system (aos) +2 moreUnauthenticated Denial-of-Service via Crafted Messages in a Network Protocol Handling ComponentCVE-2026-238257.5 High
- arubanetworks arubaos, sd-wan, hewlett packard enterprise (hpe) hpe aruba networking wireless operating system (aos) +2 moreUnauthenticated Denial-of-Service via Crafted Messages in a Network Protocol Handling ComponentCVE-2026-238247.5 High
- arubanetworks arubaos, hewlett packard enterprise (hpe) arubaos (aos) +1 moreAuthenticated Command Injection leads to RCE in AOS-10 CLI CommandCVE-2026-238237.2 High
- arubanetworks arubaos, hewlett packard enterprise (hpe) arubaos (aos) +1 moreUnauthenticated XML External Entity Injection in AOS-8 Instant allows Denial of ServiceCVE-2026-238225.3 Medium
- arubanetworks arubaos, hewlett packard enterprise (hpe) arubaos (aos) +1 moreInconsistent input filtering allows Authenticated Command Injection in AOS-10 CLICVE-2026-238217.2 High
- arubanetworks arubaos, hewlett packard enterprise (hpe) arubaos (aos) +1 moreInconsistent input filtering allows Authenticated Command Injection in AOS-8 Instant and AOS-10 CLICVE-2026-238207.2 High
- arubanetworks arubaos, hewlett packard enterprise (hpe) arubaos (aos) +1 moreError in SSID Processing allows Stored XSS in Web Management InterfaceCVE-2026-238198.8 High
- hewlett packard enterprise (hpe) private 5g core, hpe aruba networking private 5g core +1 moreOpen Redirect Vulnerability in HPE Aruba Networking Private 5G Core On-PremCVE-2026-238188.8 High
- hewlett packard enterprise (hpe) aos-cx, hpe arubaos-cx +1 moreUnauthenticated Open Redirect allows URL Manipulation in Web InterfaceCVE-2026-238176.5 Medium
- hewlett packard enterprise (hpe) aos-cx, hpe arubaos-cx +1 moreAuthenticated Command Injection found in admin AOS-CX CLI commandCVE-2026-238167.2 High
- hewlett packard enterprise (hpe) aos-cx, hpe arubaos-cx +1 moreAuthenticated Command Injection found in AOS-CX Administrative CLI CommandCVE-2026-238157.2 High
- hewlett packard enterprise (hpe) aos-cx, hpe arubaos-cx +1 moreAuthenticated Command Injection found in AOS-CX CLI CommandCVE-2026-238148.8 High
- hewlett packard enterprise (hpe) aos-cx, hpe arubaos-cx +1 moreAuthentication Bypass in Web Interface allows Unauthenticated Admin Password ResetCVE-2026-23813Public exploit9.8 Critical
- arubanetworks arubaos, hewlett packard enterprise (hpe) hpe aruba networking wireless operating systems (aos-8 & aos-10) +1 moreSecurity Boundary Bypass via Routing Node ImpersonationCVE-2026-238124.3 Medium
- arubanetworks arubaos, hewlett packard enterprise (hpe) hpe aruba networking wireless operating systems (aos-8 & aos-10) +1 moreUnauthorized Bi-Directional Traffic Interception via L2/L3 ManipulationCVE-2026-238114.3 Medium
- arubanetworks arubaos, hewlett packard enterprise (hpe) hpe aruba networking wireless operating systems (aos-8 & aos-10) +1 moreCross-BSSID GTK Re-encryption and Traffic InjectionCVE-2026-238104.3 Medium
- arubanetworks arubaos, hewlett packard enterprise (hpe) hpe aruba networking wireless operating system (aos-10 & aos-8) +1 moreMAC Address Spoofing leads to Inter-BSSID Isolation Bypass Resulting in Traffic RedirectionCVE-2026-238095.4 Medium
- arubanetworks arubaos, hewlett packard enterprise (hpe) hpe aruba networking wireless operating system (aos-10 & aos-8) +1 moreClient Isolation Bypass via GTK ManipulationCVE-2026-238085.4 Medium
- arubanetworks arubaos, hewlett packard enterprise (hpe) hpe aruba networking wireless operating system (aos-10 & aos-8) +1 moreFrame Injection via Shared GTK Allows Traffic Spoofing and Client CompromiseCVE-2026-236015.4 Medium
- hewlett packard enterprise (hpe) hpe autopass license server (apls), hpe autopass license server +1 moreA remote authentication bypass vulnerability
exists in HPE AutoPass License Server (APLS).CVE-2026-2360010.0 Critical
- hewlett packard enterprise (hpe) hpe aruba networking clearpass policy managerLocal Privilege Escalation Vulnerability in HPE Aruba Networking Clear Pass Policy Manager OnGuard for LinuxCVE-2026-235997.8 High
- hewlett packard enterprise (hpe) hpe aruba networking private 5g core, hpe aruba networking private 5g core +1 moreUnauthenticated Information Disclosure in application API allows sensitive system information exposureCVE-2026-235986.5 Medium
- hewlett packard enterprise (hpe) hpe aruba networking private 5g core, hpe aruba networking private 5g core +1 moreUnauthenticated Information Disclosure in application API allows sensitive system information exposureCVE-2026-235976.5 Medium
- hewlett packard enterprise (hpe) hpe aruba networking private 5g core, hpe aruba networking private 5g core +1 moreUnauthenticated Improper Access Control in management API allows unauthorized service disruptionCVE-2026-235966.5 Medium
- hewlett packard enterprise (hpe) hpe aruba networking private 5g core, hpe aruba networking private 5g core +1 moreUnauthenticated Authentication Bypass in application API allows unauthorized administrative account creationCVE-2026-235958.8 High
- hewlett packard enterprise (hpe) hpe aruba networking fabric composerUnauthenticated Limited File Read allows Data Exposure in Web InterfaceCVE-2026-235937.5 High
- hewlett packard enterprise (hpe) hpe aruba networking fabric composerInsecure File Handling allows Remote Code Execution in Backup FunctionalityCVE-2026-235927.2 High
- arubanetworks edgeconnect sd-wan orchestratorAuthenticated SQL Injection in EdgeConnect SD-WAN Orchestrator Web-Based Management InterfaceCVE-2025-371817.2 High
- arubanetworks edgeconnect sd-wan orchestratorAuthenticated Stored Cross-Site Scripting Vulnerabilities (XSS) in EdgeConnect SD-WAN Orchestrator Web Administration InterfaceCVE-2025-371855.5 Medium
- arubanetworks edgeconnect sd-wan orchestratorUnauthenticated Bypass Allows Multi-Factor Authentication CircumventionCVE-2025-371849.8 Critical
- arubanetworks edgeconnect sd-wan orchestratorAuthenticated SQL Injection in EdgeConnect SD-WAN Orchestrator Web-Based Management InterfaceCVE-2025-371837.2 High
- arubanetworks edgeconnect sd-wan orchestratorAuthenticated SQL Injection in EdgeConnect SD-WAN Orchestrator Web-Based Management InterfaceCVE-2025-371827.2 High
- Show moreLoading…