HPE Archives • Daily CyberSecurity

HPE Patches 72 Flaws in AOS-8 and AOS-10, Including Eight CVSS 10.0 Bugs

HPE Networking AOS vulnerabilities in AOS-8 and AOS-10 PAPI protocol fixed by HPE

HPE Patches 72 Flaws in AOS-8 and AOS-10, Including Eight CVSS 10.0 Bugs

Do Son October 23, 2026

HPE fixes 72 HPE Networking AOS vulnerabilities, including PAPI protocol flaws and CVSS 10 bugs CVE-2026-79844, CVE-2026-79845 and CVE-2026-79846.

HPE Fixes Critical iLO 7 Admin Access Flaw and iMC Authentication Bypass HPE iLO 7 vulnerability CVE-2026-79820 admin access and HPE iMC authentication bypass CVE-2026-79842 fixed

HPE iLO 7 vulnerability CVE-2026-79820 admin access and HPE iMC authentication bypass CVE-2026-79842 fixed

HPE Fixes Critical iLO 7 Admin Access Flaw and iMC Authentication Bypass

Do Son October 9, 2026

HPE fixes a critical HPE iLO 7 vulnerability, CVE-2026-79820, and iMC authentication bypass CVE-2026-79842. Update iLO to 1.25.01 now.

HPE Fixes Six Critical AOS-Switch Flaws Enabling Unauthenticated RCE and Admin Access HPE AOS-Switch vulnerabilities CVE-2026-76744 and CVE-2026-76742 unauthenticated remote code execution and authentication bypass fixed in AOS-S 16.11.0032

HPE AOS-Switch vulnerabilities CVE-2026-76744 and CVE-2026-76742 unauthenticated remote code execution and authentication bypass fixed in AOS-S 16.11.0032

HPE Fixes Six Critical AOS-Switch Flaws Enabling Unauthenticated RCE and Admin Access

Do Son October 7, 2026

Nine HPE AOS-Switch vulnerabilities, including unauthenticated RCE flaw CVE-2026-76744 (CVSS 9.8), are fixed. Upgrade to AOS-S 16.11.0032.

HPE Patches 28 ClearPass Policy Manager Flaws, Including Unauthenticated RCE Bugs HPE ClearPass Policy Manager vulnerabilities CVE-2026-76750 and CVE-2026-76752 unauthenticated RCE and authentication bypass fixed in CPPM 6.14.1

HPE ClearPass Policy Manager vulnerabilities CVE-2026-76750 and CVE-2026-76752 unauthenticated RCE and authentication bypass fixed in CPPM 6.14.1

HPE Patches 28 ClearPass Policy Manager Flaws, Including Unauthenticated RCE Bugs

Do Son October 7, 2026

HPE fixes 28 ClearPass Policy Manager vulnerabilities, including unauthenticated RCE flaw CVE-2026-76750 (CVSS 9.8). Upgrade to CPPM 6.14.1.

HPE Patches 18 Instant ON Access Point Vulnerabilities, Five Rated Critical HPE Instant ON vulnerabilities in access points, including critical RCE flaws CVE-2026-76721 and CVE-2026-76722

HPE Instant ON vulnerabilities in access points, including critical RCE flaws CVE-2026-76721 and CVE-2026-76722

HPE Patches 18 Instant ON Access Point Vulnerabilities, Five Rated Critical

Do Son September 30, 2026

HPE fixed 18 HPE Instant ON vulnerabilities in its access points, including CVSS 9.8 RCE flaws CVE-2026-76721 and CVE-2026-76722. Update to 3.4.2.0.

Critical HPE EdgeConnect Authorization Bypass Exposed Diagram showing the HPE EdgeConnect authorization bypass vulnerability

Critical HPE EdgeConnect Authorization Bypass Exposed

Do Son September 16, 2026

A critical HPE EdgeConnect authorization bypass (CVE-2026-76670) enables full system compromise. Patch this HPE EdgeConnect authorization bypass now.

HPE Fabric Composer Vulnerabilities Expose Critical Systems Illustration of HPE Fabric Composer vulnerabilities including critical HPE Fabric Composer vulnerabilities

Illustration of HPE Fabric Composer vulnerabilities including critical HPE Fabric Composer vulnerabilities

HPE Fabric Composer Vulnerabilities Expose Critical Systems

Do Son September 1, 2026

Critical HPE Fabric Composer vulnerabilities, including CVE-2026-76657, allow remote code execution. Update to version 7.4.0 now to secure your network.

Urgent Patch Required: HPE AutoPass License Server Hits Maximum Severity Risk HPE AutoPass Vulnerability, CVE-2026-23600 CVE-2024-22442 - HPE vulnerability HPE Storage Vulnerability CVE-2026-23594

Urgent Patch Required: HPE AutoPass License Server Hits Maximum Severity Risk

Do Son March 3, 2026

HPE warns of a critical CVSS 10.0 vulnerability (CVE-2026-23600) in AutoPass License Server. Remote attackers can bypass authentication. Patch to 9.19 now!

CVE-2026-23594: High-Severity Flaw in HPE Alletra & Nimble Grants Admin Access HPE AutoPass Vulnerability, CVE-2026-23600 CVE-2024-22442 - HPE vulnerability HPE Storage Vulnerability CVE-2026-23594

CVE-2026-23594: High-Severity Flaw in HPE Alletra & Nimble Grants Admin Access

Do Son January 23, 2026

HPE warns of critical flaw CVE-2026-23594 in Alletra & Nimble Storage. CVSS 8.8 bug allows remote admin access. Update to v6.1.2.800 now to secure data.

CVE-2025-37164 (CVSS 10.0): Unauthenticated HPE OneView RCE Grants Total Control Over Data Centers

shell-quote command injection AI-Driven Vulnerabilities Q1 2026 Cyber Threats vm2 Sandbox Escape Node.js RCE upKeeper Privilege Escalation CVE-2026-2449 Pharos Controls Vulnerability Root Access Exploit Cybersecurity Vulnerability Roundup CVSS 10.0 Flaws Shadow Archives CVE-2026-0866 MS-Agent Prompt Injection CVE-2026-2256 basic-ftp Path Traversal CVE-2026-27699 telnetd Root Vulnerability CVE-1999-0073 Regression USR-W610 Vulnerabilities End-of-Life IoT Security IceWarp Security Update IceWarp Vulnerabilities Airleader Master Vulnerability CVE-2026-1358 ZLAN5143D Vulnerability CISA ICS Advisory Acronis Cyber Protect Vulnerability CVE-2025-30411 WAGO 852 Vulnerability OT Network Security SandboxJS Vulnerability Sandbox Escape (CVSS 10.0) Kubernetes Local Path Provisioner CVE-2025-62878 CISA Unresponsive Vendors Avation & RISS Vulnerabilities KiloView Vulnerability CVE-2026-1453 OpenClaw RCE vulnerability Johnson Controls Vulnerability CVE-2025-26385 SandboxJS Vulnerability CVE-2026-23830 ibaPDA Vulnerability CVE-2025-14988 Protobuf Vulnerability CVE-2026-0994 AVEVA Process Optimization Vulnerability CVE-2025-61937 ConnectWise PSA Vulnerability CVE-2026-0695 Aruba VIA Vulnerability CVE-2025-37186 aiohttp v3.13.3, Denial of Service (DoS) SmarterMail RCE, CVE-2025-52691 Airoha RACE, Headphone Jacking HPE OneView RCE CVE-2025-37164 FreePBX Auth Bypass, PBX Takeover ScreenConnect Config Flaw, Untrusted Extensions Ruby SAML Auth Bypass, XML Parser Differential Devolutions SQL Injection, Password Manager Flaw Vivotek Unauthenticated RCE, EOL IP Camera Flaw Lynx+ Critical Flaw, Unauthenticated Reset Firebox Default Credentials, CVE-2025-59396 Veeder-Root RCE, Critical ATG Flaw ArcGIS Server SQLi Watchdoc RCE, CVE-2025-58384 Delta DIALink Daikin Security Gateway, authentication bypass Frostbyte10, industrial controller security SunPower, vulnerability Ubiquiti UniFi Connect, EV Station Vulnerabilities Adobe Experience Manager, RCE Vulnerability UniFi Access, Command Injection LDAPNightmare - CVE-2025-1316

CVE-2025-37164 (CVSS 10.0): Unauthenticated HPE OneView RCE Grants Total Control Over Data Centers

Do Son December 18, 2025

HPE issued an urgent alert for a CVSS 10.0 RCE in OneView. Attackers can seize unauthenticated control of data centers. Upgrade to v11.00+ now.

HPE Completes $14B Juniper Networks Acquisition, Doubles Networking Business & Boosts AI Portfolio Juniper vLWC Vulnerability Default Password Exploit HPE, Juniper Networks CVE-2024-21611 & CVE-2024-21591 - CVE-2025-21589

Juniper vLWC Vulnerability Default Password Exploit HPE, Juniper Networks CVE-2024-21611 & CVE-2024-21591 - CVE-2025-21589

HPE Completes $14B Juniper Networks Acquisition, Doubles Networking Business & Boosts AI Portfolio

Do Son July 5, 2025

HPE officially completed its $14B acquisition of Juniper Networks, doubling its networking business to bolster AI-native and cloud-native solutions in hybrid cloud infrastructure.

CVSS 9.8 Alert: Critical Flaws in HPE Insight Remote Support Enable RCE & File Access HPE Security, Insight RS Vulnerabilities

CVSS 9.8 Alert: Critical Flaws in HPE Insight Remote Support Enable RCE & File Access

Do Son June 5, 2025

Critical CVSS 9.8 flaws in HPE Insight Remote Support could allow remote code execution and SYSTEM-level file access. Patch now to stay secure.

HPE Insight Remote Support Hit with Critical Vulnerabilities, Urgent Patch Released CVE-2024-53676

HPE Insight Remote Support Hit with Critical Vulnerabilities, Urgent Patch Released

Do Son November 27, 2024

Urgent security bulletin: Critical vulnerabilities in HPE Insight Remote Support service (CVE-2024-53676). Stay protected from unauthorized access and remote code execution.

CVE-2024-42509 (CVSS 9.8): Critical Vulnerability Exposes Aruba Access Points to Attack CVE-2024-42509 & CVE-2024-47460 HPE Aruba Fabric Composer CVE-2026-23592 Aruba AOS-CX CVE-2026-23813

CVE-2024-42509 & CVE-2024-47460 HPE Aruba Fabric Composer CVE-2026-23592 Aruba AOS-CX CVE-2026-23813

CVE-2024-42509 (CVSS 9.8): Critical Vulnerability Exposes Aruba Access Points to Attack

Do Son November 6, 2024

Protect your network against critical vulnerabilities in HPE Aruba Access Points. Learn about CVE-2024-42509 & CVE-2024-47460 and how to apply the necessary security patches.

CVE-2024-42500 (CVSS 9.3): Critical HPE HP-UX Vulnerability Demands Immediate Action HPE HP-UX - CVE-2024-42500 CVE-2024-540385

CVE-2024-42500 (CVSS 9.3): Critical HPE HP-UX Vulnerability Demands Immediate Action

Do Son September 10, 2024

Protect your HPE HP-UX systems from a critical vulnerability (CVE-2024-42500) that could lead to DoS attacks. Take action now to safeguard your organization's data.