# cve.now: Hewlett Packard Enterprise (HPE)

The newest entries naming Hewlett Packard Enterprise (HPE) as an affected vendor (up to 200), of 790 in all, 1 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-95786](https://cve.now/CVE-2026-95786.md): Access Control Vulnerability Could Permit Unauthorized Interaction with Protected Services (CVSS 6.5)
- [CVE-2026-95785](https://cve.now/CVE-2026-95785.md): Authenticated Component Vulnerability Could Affect System Confidentiality, Integrity, Availability, and Trusted Operations (CVSS 7.2)
- [CVE-2026-95784](https://cve.now/CVE-2026-95784.md): System Component Vulnerability Could Cause Service Unavailability (CVSS 7.5)
- [CVE-2026-95783](https://cve.now/CVE-2026-95783.md): Network Processing Vulnerability Could Cause Service Disruption (CVSS 7.5)
- [CVE-2026-95782](https://cve.now/CVE-2026-95782.md): Monitoring Interface Vulnerability Could Permit Unauthorized Access to Protected Information (CVSS 7.5)
- [CVE-2026-95781](https://cve.now/CVE-2026-95781.md): AthonetOS Vulnerability Could Enable Unauthorized Access or Compromise Service Integrity (CVSS 7.5)
- [CVE-2026-95780](https://cve.now/CVE-2026-95780.md): Authentication and Session Management Vulnerability Could Permit Continued Unauthorized Access (CVSS 8.1)
- [CVE-2026-95779](https://cve.now/CVE-2026-95779.md): An exposure of the appliance’s confidential certificate information vulnerability exists in HPE Morpheus manager software. (CVSS 8.8)
- [CVE-2026-95778](https://cve.now/CVE-2026-95778.md): A remote code execution vulnerability exists in HPE Morpheus Software. (CVSS 8.8)
- [CVE-2026-44875](https://cve.now/CVE-2026-44875.md): In HPE Cray Programming Environment versions 25.03 and 25.09, prior to 26.03, the method that CPE is deployed on HPCM potentially allows… (CVSS 7.8)
- [CVE-2026-95730](https://cve.now/CVE-2026-95730.md): Authenticated Buffer Overflow Vulnerability Leads to Denial-of-Service in HPE Networking VIA (CVSS 6.5)
- [CVE-2026-95729](https://cve.now/CVE-2026-95729.md): Authenticated Sensitive Information Disclosure in VIA (CVSS 6.5)
- [CVE-2026-95728](https://cve.now/CVE-2026-95728.md): Local Privilege Escalation in Virtual Intranet Access (VIA) Client for Linux (CVSS 7.1)
- [CVE-2026-95727](https://cve.now/CVE-2026-95727.md): Authenticated Command Injection Vulnerability in HPE Networking VIA (CVSS 7.2)
- [CVE-2026-95726](https://cve.now/CVE-2026-95726.md): Unauthenticated Buffer Overflow Vulnerability Leading to Denial-of-Service in HPE Networking VIA (CVSS 7.5)
- [CVE-2026-95725](https://cve.now/CVE-2026-95725.md): Authenticated Local Command Injection Vulnerability in the VIA Client for Linux (CVSS 7.8)
- [CVE-2026-95724](https://cve.now/CVE-2026-95724.md): Unauthenticated Improper Certificate Validation leads to Authentication Bypass in HPE Networking Virtual Intranet Access (VIA) (CVSS 8.1)
- [CVE-2026-95723](https://cve.now/CVE-2026-95723.md): Authenticated Local Missing Integrity Verification Vulnerability leads to Local Privilege Escalation in Virtual Intranet Access (VIA) Client (CVSS 8.4)
- [CVE-2026-95722](https://cve.now/CVE-2026-95722.md): Local Privilege Escalation Vulnerability in the Virtual Intranet Access (VIA) Client (CVSS 8.8)
- [CVE-2026-95777](https://cve.now/CVE-2026-95777.md): Authenticated Sensitive Information Disclosure in HPE Networking Fabric Composer Management Interface (CVSS 3.1)
- [CVE-2026-95776](https://cve.now/CVE-2026-95776.md): Authenticated Path Traversal Vulnerability in HPE Networking Fabric Composer API Allows for Limited File Read (CVSS 3.1)
- [CVE-2026-95775](https://cve.now/CVE-2026-95775.md): Authenticated Local Information Disclosure Vulnerability in HPE Networking Fabric Composer (CVSS 3.3)
- [CVE-2026-95774](https://cve.now/CVE-2026-95774.md): Unauthenticated Sensitive Information Disclosure in HPE Networking Fabric Composer (CVSS 3.7)
- [CVE-2026-95773](https://cve.now/CVE-2026-95773.md): Authenticated Local Denial-of-Service Vulnerability in HPE Networking Fabric Composer (CVSS 3.8)
- [CVE-2026-95772](https://cve.now/CVE-2026-95772.md): Authenticated Race Condition in API of HPE Networking Fabric Composer (CVSS 4.2)
- [CVE-2026-95771](https://cve.now/CVE-2026-95771.md): Authenticated Information Disclosure in HPE Networking Fabric Composer API Endpoint (CVSS 4.3)
- [CVE-2026-95770](https://cve.now/CVE-2026-95770.md): Authenticated Local Sensitive Information Disclosure in HPE Networking Fabric Composer (CVSS 4.7)
- [CVE-2026-95769](https://cve.now/CVE-2026-95769.md): Unauthenticated Audit Log Spoofing in API of HPE Networking Fabric Composer (CVSS 5.3)
- [CVE-2026-95768](https://cve.now/CVE-2026-95768.md): Privilege Escalation Leading to Information Disclosure in HPE Networking Fabric Composer API (CVSS 5.3)
- [CVE-2026-95767](https://cve.now/CVE-2026-95767.md): Unauthenticated Information Disclosure in HPE Networking Fabric Composer (CVSS 5.3)
- [CVE-2026-95766](https://cve.now/CVE-2026-95766.md): Authenticated Sensitive Information Disclosure in HPE Networking Fabric Composer (CVSS 5.3)
- [CVE-2026-95765](https://cve.now/CVE-2026-95765.md): Unauthenticated Sensitive Information Disclosure in Web-Based Management Interface of HPE Networking Fabric Composer (CVSS 5.4)
- [CVE-2026-95764](https://cve.now/CVE-2026-95764.md): Unauthenticated Adjacent Improper Certificate Validation in HPE Networking Fabric Composer (CVSS 5.7)
- [CVE-2026-95763](https://cve.now/CVE-2026-95763.md): Unauthenticated Improper Certificate Validation allows Information Disclosure in HPE Networking Fabric Composer (CVSS 5.9)
- [CVE-2026-95762](https://cve.now/CVE-2026-95762.md): Authenticated Insufficient Session Expiration Vulnerability in the API of HPE Networking Fabric Composer (CVSS 5.9)
- [CVE-2026-95761](https://cve.now/CVE-2026-95761.md): Authenticated Improper Certificate Validation leads to Information Disclosure in HPE Networking Fabric Composer (CVSS 5.9)
- [CVE-2026-95760](https://cve.now/CVE-2026-95760.md): Privilege Escalation Vulnerability in HPE Networking Fabric Composer API (CVSS 6.4)
- [CVE-2026-95759](https://cve.now/CVE-2026-95759.md): Authenticated Audit Log Bypass in the API of HPE Networking Fabric Composer (CVSS 6.5)
- [CVE-2026-95758](https://cve.now/CVE-2026-95758.md): Authenticated Authorization Bypass in the API of HPE Networking Fabric Composer (CVSS 6.5)
- [CVE-2026-95757](https://cve.now/CVE-2026-95757.md): Authentication Bypass Vulnerability in HPE Networking Fabric Composer API (CVSS 6.5)
- [CVE-2026-95756](https://cve.now/CVE-2026-95756.md): Authenticated Command Injection Vulnerability in the API of HPE Networking Fabric Composer (CVSS 6.6)
- [CVE-2026-95755](https://cve.now/CVE-2026-95755.md): Unauthenticated Adjacent Improper Certificate Validation allows Interception of Management Traffic in HPE Networking Fabric Composer (CVSS 6.8)
- [CVE-2026-95753](https://cve.now/CVE-2026-95753.md): Privilege Escalation in HPE Networking Fabric Composer API (CVSS 7.1)
- [CVE-2026-95752](https://cve.now/CVE-2026-95752.md): Local Privilege Escalation in HPE Networking Fabric Composer (CVSS 7.1)
- [CVE-2026-95751](https://cve.now/CVE-2026-95751.md): Unauthenticated Improper Certificate Validation Leads to Authentication Bypass in HPE Networking Fabric Composer (CVSS 7.4)
- [CVE-2026-95750](https://cve.now/CVE-2026-95750.md): Unauthenticated Improper Certificate Validation in HPE Networking Fabric Composer (CVSS 7.5)
- [CVE-2026-95749](https://cve.now/CVE-2026-95749.md): Unauthenticated Missing Integrity Verification in HPE Networking Fabric Composer (CVSS 7.5)
- [CVE-2026-95748](https://cve.now/CVE-2026-95748.md): Unauthenticated Adjacent SQL Injection Vulnerability in HPE Networking Fabric Composer (CVSS 7.5)
- [CVE-2026-95747](https://cve.now/CVE-2026-95747.md): Privilege Escalation in the SSH Interface of HPE Networking Fabric Composer (CVSS 7.5)
- [CVE-2026-95746](https://cve.now/CVE-2026-95746.md): Authentication Bypass in the API Endpoint of HPE Networking Fabric Composer (CVSS 7.5)
- [CVE-2026-95745](https://cve.now/CVE-2026-95745.md): Unauthenticated Remote Denial-of-Service (DoS) Vulnerability in the API of HPE Networking Fabric Composer (CVSS 7.5)
- [CVE-2026-95744](https://cve.now/CVE-2026-95744.md): Authenticated Adjacent Sensitive Information Disclosure in HPE Networking Fabric Composer (CVSS 7.7)
- [CVE-2026-95743](https://cve.now/CVE-2026-95743.md): Local Privilege Escalation Vulnerabilities in HPE Networking Fabric Composer (CVSS 7.8)
- [CVE-2026-95742](https://cve.now/CVE-2026-95742.md): Authenticated Local Arbitrary File Write Vulnerability in HPE Networking Fabric Composer (CVSS 7.8)
- [CVE-2026-95741](https://cve.now/CVE-2026-95741.md): Authenticated Missing Integrity Verification in API of HPE Networking Fabric Composer (CVSS 8.0)
- [CVE-2026-95740](https://cve.now/CVE-2026-95740.md): Unauthenticated Adjacent Improper Certificate Validation Vulnerability leads to Information Disclosure in HPE Networking Fabric Composer (CVSS 8.0)
- [CVE-2026-95739](https://cve.now/CVE-2026-95739.md): Unauthenticated Improper Restriction of Excessive Authentication Attempts in the API of HPE Networking Fabric Composer (CVSS 8.1)
- [CVE-2026-95738](https://cve.now/CVE-2026-95738.md): Authentication Bypass in the Affected Interface of HPE Networking Fabric Composer (CVSS 8.1)
- [CVE-2026-95737](https://cve.now/CVE-2026-95737.md): Local Privilege Escalation in HPE Networking Fabric Composer (CVSS 8.2)
- [CVE-2026-95736](https://cve.now/CVE-2026-95736.md): Unauthenticated Adjacent Improper Certificate Validation Vulnerabilities in HPE Networking Fabric Composer (CVSS 8.3)
- [CVE-2026-95735](https://cve.now/CVE-2026-95735.md): Improper Certificate Validation in HPE Networking Fabric Composer (CVSS 8.7)
- [CVE-2026-95734](https://cve.now/CVE-2026-95734.md): Authenticated Sensitive Information Disclosure in HPE Networking Fabric Composer API (CVSS 8.8)
- [CVE-2026-95733](https://cve.now/CVE-2026-95733.md): Use of Hardcoded Credentials in HPE Networking Fabric Composer Could Allow Adjacent Arbitrary Code Execution (CVSS 9.6)
- [CVE-2026-95732](https://cve.now/CVE-2026-95732.md): Authentication Bypass in HPE Networking Fabric Composer allows Arbitrary Code Execution (CVSS 9.6)
- [CVE-2026-95731](https://cve.now/CVE-2026-95731.md): Unauthenticated Hardcoded Password Vulnerabilities in HPE Networking Fabric Composer Command-Line Interface allow Unauthorized… (CVSS 9.8)
- [CVE-2026-95721](https://cve.now/CVE-2026-95721.md): Authenticated Local Memory Corruption Vulnerability in AOS-8 Web-Based Management Interface (CVSS 3.3)
- [CVE-2026-95720](https://cve.now/CVE-2026-95720.md): Authenticated Local Buffer Overflow Vulnerability leads to Denial-of-Service in AOS-8 (CVSS 4.4)
- [CVE-2026-95719](https://cve.now/CVE-2026-95719.md): Authenticated Arbitrary File Deletion Vulnerability leads to Denial-of-Service in AOS-10 (CVSS 4.9)
- [CVE-2026-95718](https://cve.now/CVE-2026-95718.md): Authentication Bypass Vulnerability in the PAPI Protocol of AOS-8 (CVSS 5.3)
- [CVE-2026-95717](https://cve.now/CVE-2026-95717.md): Authenticated Stored Cross-Site Scripting (XSS) Vulnerability in AOS Web-Based Management Interface (CVSS 5.5)
- [CVE-2026-95716](https://cve.now/CVE-2026-95716.md): Authentication Bypass in the PAPI Protocol of AOS-10 allows Unauthorized Configuration Changes (CVSS 6.5)
- [CVE-2026-95715](https://cve.now/CVE-2026-95715.md): Unauthenticated Local Command Injection Vulnerability in AOS-10 Command Line Interface (CVSS 6.8)
- [CVE-2026-95714](https://cve.now/CVE-2026-95714.md): Authenticated Adjacent Buffer Overflow Vulnerability leads to Remote Code Execution in AOS-10 (CVSS 6.8)
- [CVE-2026-95713](https://cve.now/CVE-2026-95713.md): Unauthenticated Buffer Overflow Vulnerability leads to Denial-of-Service in AOS-8 Command Line Interface (CVSS 7.0)
- [CVE-2026-95712](https://cve.now/CVE-2026-95712.md): Unauthenticated Adjacent Sensitive Information Disclosure and Denial-of-Service in AOS-8 via the PAPI Protocol (CVSS 7.1)
- [CVE-2026-95711](https://cve.now/CVE-2026-95711.md): Authentication Bypass Leading to Remote Code Execution in AOS-10 Web-Based Management Interface (CVSS 7.1)
- [CVE-2026-95710](https://cve.now/CVE-2026-95710.md): Unauthenticated Adjacent Buffer Overflow Vulnerability leads to Denial-of-Service in AOS-10 or AOS-8 (CVSS 7.1)
- [CVE-2026-95709](https://cve.now/CVE-2026-95709.md): Authenticated Command Injection Vulnerabilities in AOS-10 (CVSS 7.2)
- [CVE-2026-95708](https://cve.now/CVE-2026-95708.md): Authenticated File Write leads to Command Injection Vulnerabilities in AOS-10 (CVSS 7.2)
- [CVE-2026-95707](https://cve.now/CVE-2026-95707.md): Authenticated Buffer Overflow Vulnerability leads to Remote Code Execution in AOS-8 (CVSS 7.2)
- [CVE-2026-95706](https://cve.now/CVE-2026-95706.md): Authenticated Command Injection Vulnerabilities in AOS-8 (CVSS 7.2)
- [CVE-2026-95705](https://cve.now/CVE-2026-95705.md): Authenticated Command Injection Vulnerabilities in AOS-8 (CVSS 7.2)
- [CVE-2026-95704](https://cve.now/CVE-2026-95704.md): Authenticated Remote Code Execution allows Unauthorized System Control in Wireless Network Management Interface (CVSS 7.2)
- [CVE-2026-79956](https://cve.now/CVE-2026-79956.md): Improper Sanitization leads to Command Injection in AOS-8 Web Interface (CVSS 7.2)
- [CVE-2026-79955](https://cve.now/CVE-2026-79955.md): Unauthenticated Memory Corruption Vulnerability leads to Denial-of-Service in AOS-8 (CVSS 7.5)
- [CVE-2026-79895](https://cve.now/CVE-2026-79895.md): Unauthenticated Remote Denial-of-Service (DoS) Vulnerabilities in AOS-10 (CVSS 7.5)
- [CVE-2026-79894](https://cve.now/CVE-2026-79894.md): Unauthenticated Denial-of-Service (DoS) Vulnerability in the PAPI Protocol of AOS-8 (CVSS 7.5)
- [CVE-2026-79893](https://cve.now/CVE-2026-79893.md): Unauthenticated Memory Corruption Vulnerabilities lead to Denial-of-Service in AOS-10 (CVSS 7.5)
- [CVE-2026-79892](https://cve.now/CVE-2026-79892.md): Authenticated Local Memory Corruption Vulnerability leads to Arbitrary Code Execution in AOS-8 (CVSS 7.8)
- [CVE-2026-79891](https://cve.now/CVE-2026-79891.md): Unauthenticated Buffer Overflow Vulnerability leads to Remote Code Execution in AOS-8 (CVSS 8.1)
- [CVE-2026-79890](https://cve.now/CVE-2026-79890.md): Unauthenticated Command Injection Vulnerabilities in AOS-8 Accessed by the PAPI Protocol (CVSS 8.1)
- [CVE-2026-79889](https://cve.now/CVE-2026-79889.md): Multiple Unauthenticated Buffer Overflow vulnerabilities in AOS-8 Web Interface result in Remote Code Execution (CVSS 8.1)
- [CVE-2026-79888](https://cve.now/CVE-2026-79888.md): Unauthenticated Buffer Overflow allows Remote Code Execution in web interface (CVSS 8.1)
- [CVE-2026-79887](https://cve.now/CVE-2026-79887.md): Authentication Bypass in Web Interface of AOS-8 allows Remote Command Execution (RCE) (CVSS 8.1)
- [CVE-2026-79886](https://cve.now/CVE-2026-79886.md): Unauthenticated Buffer Overflow Vulnerability leads to Denial-of-Service in AOS-8 (CVSS 8.2)
- [CVE-2026-79885](https://cve.now/CVE-2026-79885.md): Unauthenticated File Write Vulnerability leads to Denial-of-Service in AOS-8 (CVSS 8.2)
- [CVE-2026-79884](https://cve.now/CVE-2026-79884.md): Authentication Bypass leads to Sensitive Information Disclosure in AOS-8 (CVSS 8.2)
- [CVE-2026-79883](https://cve.now/CVE-2026-79883.md): Unauthenticated Adjacent Buffer Overflow Vulnerability in the PAPI Protocol leads to Sensitive Information Disclosure in AOS-10 (CVSS 8.3)
- [CVE-2026-79882](https://cve.now/CVE-2026-79882.md): Unauthenticated Adjacent Command Injection Vulnerability in the PAPI Protocol of AOS-10 (CVSS 8.3)
- [CVE-2026-79881](https://cve.now/CVE-2026-79881.md): Authentication Bypass Leading to Remote Code Execution in AOS-8 (CVSS 8.5)
- [CVE-2026-79880](https://cve.now/CVE-2026-79880.md): Authenticated Server-Side Request Forgery leads to Remote Code Execution in AOS-8 (CVSS 8.7)
- [CVE-2026-79879](https://cve.now/CVE-2026-79879.md): Unauthenticated Adjacent Memory Corruption Vulnerabilities lead to Remote Code Execution in AOS-10 (CVSS 8.8)
- [CVE-2026-79878](https://cve.now/CVE-2026-79878.md): Unauthenticated Adjacent Command Injection Vulnerability in the AOS-8 Command Line Interface Accessed by the PAPI Protocol (CVSS 8.8)
- [CVE-2026-79877](https://cve.now/CVE-2026-79877.md): Unauthenticated Adjacent Remote Code Execution Vulnerability in AOS-10 (CVSS 8.8)
- [CVE-2026-79876](https://cve.now/CVE-2026-79876.md): Unauthenticated Adjacent Sensitive Information Disclosure in AOS-10 Wi-Fi Frame Processing (CVSS 9.3)
- [CVE-2026-79875](https://cve.now/CVE-2026-79875.md): Authentication Bypass in the PAPI Protocol of AOS-8 Allows Unauthorized Administrative Access (CVSS 9.3)
- [CVE-2026-79874](https://cve.now/CVE-2026-79874.md): Authentication Bypass in the API allows Administrative Access of AOS-10 (CVSS 9.3)
- [CVE-2026-79873](https://cve.now/CVE-2026-79873.md): Unauthenticated Adjacent Authentication Bypasses in the PAPI Protocol of AOS-10 Leads to Unauthorized Administrative Access (CVSS 9.3)
- [CVE-2026-79872](https://cve.now/CVE-2026-79872.md): Unauthenticated Buffer Overflow Vulnerability allows Remote Code Execution in AOS-10 and AOS-8 (CVSS 9.4)
- [CVE-2026-79871](https://cve.now/CVE-2026-79871.md): Unauthenticated Sensitive Information Disclosure in the Command Line Interface of AOS-10 (CVSS 9.6)
- [CVE-2026-79870](https://cve.now/CVE-2026-79870.md): Authentication Bypass leads to Unauthorized Access in AOS-8 (CVSS 9.6)
- [CVE-2026-79869](https://cve.now/CVE-2026-79869.md): Authentication Bypass Leading to Remote Code Execution in AOS-10 (CVSS 9.6)
- [CVE-2026-79868](https://cve.now/CVE-2026-79868.md): Authentication Bypass Vulnerabilities lead to Complete System Compromise in AOS-8 (CVSS 9.6)
- [CVE-2026-79867](https://cve.now/CVE-2026-79867.md): Authentication Bypass Leading to Remote Code Execution in AOS-8 (CVSS 9.6)
- [CVE-2026-79866](https://cve.now/CVE-2026-79866.md): Unauthenticated Adjacent Path Traversal Vulnerability leads to Filesystem Compromise in AOS-8 (CVSS 9.6)
- [CVE-2026-79865](https://cve.now/CVE-2026-79865.md): Unauthenticated Adjacent Memory Corruption Vulnerability leads to Remote Code Execution in AOS-10 (CVSS 9.6)
- [CVE-2026-79864](https://cve.now/CVE-2026-79864.md): Unauthenticated Adjacent Command Injection Vulnerability in AOS-10 (CVSS 9.6)
- [CVE-2026-79863](https://cve.now/CVE-2026-79863.md): Unauthenticated Adjacent Buffer Overflow Vulnerabilities lead to Remote Code Execution (CVSS 9.6)
- [CVE-2026-79862](https://cve.now/CVE-2026-79862.md): Unauthenticated Adjacent Buffer Overflow Vulnerabilities lead to Remote Code Execution (CVSS 9.6)
- [CVE-2026-79861](https://cve.now/CVE-2026-79861.md): Unauthenticated Command Injection Vulnerability in the PAPI Protocol of AOS-10 (CVSS 9.8)
- [CVE-2026-79860](https://cve.now/CVE-2026-79860.md): Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-8 (CVSS 9.8)
- [CVE-2026-79859](https://cve.now/CVE-2026-79859.md): Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-8 (CVSS 9.8)
- [CVE-2026-79858](https://cve.now/CVE-2026-79858.md): Unauthenticated SQL Injection Vulnerability in the PAPI Protocol of AOS-8 (CVSS 9.8)
- [CVE-2026-79857](https://cve.now/CVE-2026-79857.md): Unauthenticated Command Injection Vulnerability in AOS-8 PAPI Protocol (CVSS 9.8)
- [CVE-2026-79856](https://cve.now/CVE-2026-79856.md): Unauthenticated Buffer Overflow Vulnerability leads to Authentication Bypass in AOS-8 (CVSS 9.8)
- [CVE-2026-79855](https://cve.now/CVE-2026-79855.md): Authentication Bypass in the SSH Daemon of AOS-8 leads to Complete System Compromise (CVSS 9.8)
- [CVE-2026-79854](https://cve.now/CVE-2026-79854.md): Unauthenticated SQL Injection Vulnerability leads to Remote Code Execution in AOS-10 (CVSS 9.8)
- [CVE-2026-79853](https://cve.now/CVE-2026-79853.md): Unauthenticated Sensitive Information Disclosure leads to Remote Code Execution in AOS-10 (CVSS 9.8)
- [CVE-2026-79852](https://cve.now/CVE-2026-79852.md): Unauthenticated SQL Injection allows Remote Code Execution in AOS Web-Based Management Interface (CVSS 9.8)
- [CVE-2026-79851](https://cve.now/CVE-2026-79851.md): Unauthenticated Buffer Overflow Vulnerability leads to Remote Code Execution in AOS-10 (CVSS 10.0)
- [CVE-2026-79850](https://cve.now/CVE-2026-79850.md): Authentication Bypass Leading to Remote Code Execution in AOS-8 (CVSS 10.0)
- [CVE-2026-79849](https://cve.now/CVE-2026-79849.md): Unauthenticated SQL Injection Vulnerabilities allow Remote Code Execution in AOS-8 (CVSS 10.0)
- [CVE-2026-79848](https://cve.now/CVE-2026-79848.md): Unauthenticated SQL Injection Vulnerabilities allow Remote Code Execution in AOS-8 (CVSS 10.0)
- [CVE-2026-79847](https://cve.now/CVE-2026-79847.md): Unauthenticated Buffer Overflow Vulnerabilities leads to Remote Code Execution in AOS-10 (CVSS 10.0)
- [CVE-2026-79846](https://cve.now/CVE-2026-79846.md): Unauthenticated Command Injection Vulnerabilities in AOS-8 (CVSS 10.0)
- [CVE-2026-79844](https://cve.now/CVE-2026-79844.md): Authentication Bypass Leading to Remote Code Execution in AOS-10 (CVSS 10.0)
- [CVE-2026-79818](https://cve.now/CVE-2026-79818.md): Authentication Bypass in the API Interface Allows Unauthorized Information Disclosure in ClearPass Policy Manager (CVSS 5.3)
- [CVE-2026-79817](https://cve.now/CVE-2026-79817.md): Local Disclosure of Sensitive Information in HPE Networking ClearPass Policy Manager Client Software (CVSS 5.5)
- [CVE-2026-79816](https://cve.now/CVE-2026-79816.md): Unauthenticated DOM-Based Cross-Site Scripting (XSS) Vulnerability in the ClearPass Policy Manager Client Interface (CVSS 5.4)
- [CVE-2026-79815](https://cve.now/CVE-2026-79815.md): Authenticated Command Injection Vulnerability in the ClearPass Policy Manager OnGuard Agent (CVSS 6.5)
- [CVE-2026-79814](https://cve.now/CVE-2026-79814.md): Local Arbitrary File Write Leading to Local Privilege Escalation in ClearPass Policy Manager OnGuard Agent (CVSS 6.7)
- [CVE-2026-79813](https://cve.now/CVE-2026-79813.md): Local Privilege Escalation in ClearPass Client Software (CVSS 6.7)
- [CVE-2026-79812](https://cve.now/CVE-2026-79812.md): Authenticated Local Denial-of-Service Vulnerability in the OnGuard Agent of ClearPass Policy Manager (CVSS 6.1)
- [CVE-2026-79811](https://cve.now/CVE-2026-79811.md): Authenticated SQL Injection allows Remote Code Execution in ClearPass Policy Manager API (CVSS 7.2)
- [CVE-2026-79810](https://cve.now/CVE-2026-79810.md): Authenticated Remote Code Execution Vulnerabilities in HPE Networking ClearPass Policy Manager (CVSS 7.2)
- [CVE-2026-79809](https://cve.now/CVE-2026-79809.md): Unauthenticated Path Traversal in ClearPass Policy Manager API Endpoint Leads to Authorization Bypass (CVSS 7.3)
- [CVE-2026-79808](https://cve.now/CVE-2026-79808.md): Local Authenticated Buffer Overflow Vulnerability in the ClearPass Policy Manager OnGuard Agent (CVSS 7.8)
- [CVE-2026-79807](https://cve.now/CVE-2026-79807.md): Authenticated Local Missing Integrity Verification Vulnerability leads to Local Privilege Escalation in the ClearPass Policy Manager Windows Client Software (CVSS 7.8)
- [CVE-2026-79806](https://cve.now/CVE-2026-79806.md): Authenticated Local Privilege Escalation in ClearPass Policy Manager OnGuard Linux Agent (CVSS 7.8)
- [CVE-2026-79805](https://cve.now/CVE-2026-79805.md): Authenticated Path Traversal Vulnerability Leads to Unauthorized File Access and Modification in ClearPass Policy Manager (CVSS 9.8)
- [CVE-2026-79803](https://cve.now/CVE-2026-79803.md): Authenticated Command Injection Leading to Privilege Escalation in ClearPass Policy Manager API (CVSS 8.8)
- [CVE-2026-79802](https://cve.now/CVE-2026-79802.md): Command Injection Vulnerability in the ClearPass Policy Manager Client Software (CVSS 8.8)
- [CVE-2026-79801](https://cve.now/CVE-2026-79801.md): Unauthenticated Missing Integrity Verification allows Remote Code Execution in ClearPass Policy Manager Client Agent (CVSS 9.8)
- [CVE-2026-79800](https://cve.now/CVE-2026-79800.md): Authenticated Path Traversal Vulnerability Leads to Remote Code Execution in ClearPass Policy Manager (CVSS 8.8)
- [CVE-2026-79799](https://cve.now/CVE-2026-79799.md): Unauthenticated Stored Cross-Site Scripting (XSS) Vulnerability in ClearPass Policy Manager Web-Based Management Interface (CVSS 8.8)
- [CVE-2026-79798](https://cve.now/CVE-2026-79798.md): Authenticated SQL Injection Vulnerabilities in ClearPass Policy Manager Web-Based Management Interface (CVSS 9.9)
- [CVE-2026-79797](https://cve.now/CVE-2026-79797.md): Improper Access Control in HPE Networking ClearPass Android Client Application (CVSS 8.8)
- [CVE-2026-79796](https://cve.now/CVE-2026-79796.md): Authentication Bypass Vulnerabilities in ClearPass Policy Manager (CVSS 9.8)
- [CVE-2026-79794](https://cve.now/CVE-2026-79794.md): Authenticated SQL Injection Vulnerability in ClearPass Policy Manager Web-based Management Interface (CVSS 9.1)
- [CVE-2026-76754](https://cve.now/CVE-2026-76754.md): Unauthenticated SQL Injection Vulnerability leads to Remote Code Execution in ClearPass Policy Manager (CVSS 9.8)
- [CVE-2026-76753](https://cve.now/CVE-2026-76753.md): Unauthenticated Format String Vulnerability in HPE Networking ClearPass Policy Manager (CVSS 9.8)
- [CVE-2026-76752](https://cve.now/CVE-2026-76752.md): Authentication Bypass Vulnerabilities in HPE Networking ClearPass Policy Manager Allow Unauthorized Administrative Access (CVSS 9.8)
- [CVE-2026-76751](https://cve.now/CVE-2026-76751.md): Missing Integrity Verification in the OnGuard Agent of ClearPass Policy Manager Allows Unauthenticated Remote Code Execution (CVSS 9.8)
- [CVE-2026-76750](https://cve.now/CVE-2026-76750.md): Unauthenticated Deserialization of Untrusted Data allows Remote Code Execution in the Web Interface of HPE Networking ClearPass Policy Manager (CVSS 9.8)
- [CVE-2026-76749](https://cve.now/CVE-2026-76749.md): Unauthenticated Sensitive Information Disclosure in AOS-S (CVSS 6.5)
- [CVE-2026-76748](https://cve.now/CVE-2026-76748.md): Authenticated Privilege Escalation Vulnerability in the API of AOS-S (CVSS 8.8)
- [CVE-2026-76747](https://cve.now/CVE-2026-76747.md): Unauthenticated Buffer Overflow Vulnerabilities lead to Information Disclosure in AOS-S (CVSS 9.1)
- [CVE-2026-76746](https://cve.now/CVE-2026-76746.md): Unauthenticated Adjacent Buffer Overflow Vulnerability Leading to Information Disclosure in AOS-S (CVSS 9.3)
- [CVE-2026-76745](https://cve.now/CVE-2026-76745.md): Unauthenticated Adjacent Memory Corruption Vulnerabilities Leading to Remote Code Execution in AOS-S (CVSS 9.6)
- [CVE-2026-76744](https://cve.now/CVE-2026-76744.md): Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-S (CVSS 9.8)
- [CVE-2026-76743](https://cve.now/CVE-2026-76743.md): Authentication Bypass Vulnerability in the Management Interface of AOS-S (CVSS 9.8)
- [CVE-2026-76742](https://cve.now/CVE-2026-76742.md): Authentication Bypass in the Web Management Interface of AOS-S (CVSS 9.8)
- [CVE-2026-76741](https://cve.now/CVE-2026-76741.md): Authenticated Buffer Overflow Vulnerabilities lead to Denial-of-Service in AOS-S (CVSS 6.5)
- [CVE-2026-79820](https://cve.now/CVE-2026-79820.md): A remote user validation failure vulnerability exists in HPE Integrated Lights-Out (iLO) 7 firmware. (CVSS 9.0)
- [CVE-2026-76738](https://cve.now/CVE-2026-76738.md): Authenticated Buffer Overflow Vulnerability in the API Endpoint of HPE Networking Instant On Causes Denial-of-Service (CVSS 2.7)
- [CVE-2026-76737](https://cve.now/CVE-2026-76737.md): Authenticated Local Path Traversal Vulnerability Leads to Denial-of-Service in HPE Networking Instant On (CVSS 3.0)
- [CVE-2026-76736](https://cve.now/CVE-2026-76736.md): Authenticated Local Buffer Overflow Vulnerability leads to Denial-of-Service in HPE Networking Instant On (CVSS 3.3)
- [CVE-2026-76735](https://cve.now/CVE-2026-76735.md): Authenticated Local Sensitive Information Disclosure in HPE Networking Instant On (CVSS 4.1)
- [CVE-2026-76734](https://cve.now/CVE-2026-76734.md): Unauthenticated Memory Corruption Vulnerability leads to Denial-of-Service in HPE Networking Instant On (CVSS 4.8)
- [CVE-2026-76733](https://cve.now/CVE-2026-76733.md): Authenticated Denial-of-Service Vulnerability in HPE Networking Instant On API Endpoint (CVSS 4.9)
- [CVE-2026-76732](https://cve.now/CVE-2026-76732.md): Authenticated Local Privilege Escalation Vulnerability in a Daemon of HPE Networking Instant ON (CVSS 6.4)
- [CVE-2026-76731](https://cve.now/CVE-2026-76731.md): Authentication Bypass in the Captive Portal of HPE Networking Instant On (CVSS 6.5)
- [CVE-2026-76730](https://cve.now/CVE-2026-76730.md): Improper PAPI Packet handling leads to unauthorized access in HPE Networking Instant ON APs (CVSS 6.5)
- [CVE-2026-76729](https://cve.now/CVE-2026-76729.md): Authenticated Format String Vulnerability allows Memory Corruption in HPE Networking Instant ON API Endpoint (CVSS 6.6)
- [CVE-2026-76728](https://cve.now/CVE-2026-76728.md): Authenticated Server-Side Request Forgery Leading to Remote Code Execution in HPE Networking Instant ON APs (CVSS 7.2)
- [CVE-2026-76727](https://cve.now/CVE-2026-76727.md): Authenticated Command Injection Vulnerabilities in HPE Networking Instant ON (CVSS 7.2)
- [CVE-2026-76726](https://cve.now/CVE-2026-76726.md): Authentication Bypass Leading to Unauthorized Network Access in HPE Networking Instant ON API Endpoint (CVSS 8.1)
- [CVE-2026-76725](https://cve.now/CVE-2026-76725.md): Authentication Bypass in a Management Protocol of HPE Networking Instant ON APs (CVSS 9.6)
- [CVE-2026-76724](https://cve.now/CVE-2026-76724.md): Unauthenticated Adjacent Command Injection Vulnerability in HPE Networking Instant ON APs Command Line Interface (CLI) Accessed by the PAPI Protocol (CVSS 9.6)
- [CVE-2026-76723](https://cve.now/CVE-2026-76723.md): Unauthenticated Adjacent Buffer Overflow Vulnerabilities lead to Remote Code Execution in HPE Networking Instant ON APS (CVSS 9.6)
- [CVE-2026-76722](https://cve.now/CVE-2026-76722.md): Uncontrolled Format String Vulnerabilities lead to Remote Code Execution or Denial-of-Service in HPE Networking Instant ON APs (CVSS 9.8)
- [CVE-2026-76721](https://cve.now/CVE-2026-76721.md): Unauthenticated Buffer Overflow Vulnerability leads to Remote Code Execution in HPE Networking Instant ON APs (CVSS 9.8)
- [CVE-2026-76717](https://cve.now/CVE-2026-76717.md): Unauthenticated Remote Sensitive Information Disclosure Vulnerability in HPE Networking Analytics and Location Engine (ALE) (CVSS 5.3)
- [CVE-2026-76716](https://cve.now/CVE-2026-76716.md): Unauthenticated Remote Unauthorized Access and Denial of Service Vulnerabilities in HPE Networking Analytics and Location Engine (ALE) (CVSS 5.3)
- [CVE-2026-76715](https://cve.now/CVE-2026-76715.md): Unauthenticated Man-in-the-Middle Attach Leads to Remote Code Execution Vulnerability in HPE Networking Analytics and Location Engine (ALE) (CVSS 7.1)
- [CVE-2026-76714](https://cve.now/CVE-2026-76714.md): Authenticated Remote Code Execution with Elevated Privileges Vulnerability in HPE Networking Analytics and Location Engine (ALE) (CVSS 7.2)
- [CVE-2026-76713](https://cve.now/CVE-2026-76713.md): Authenticated Remote File System Access Vulnerability in HPE Networking Analytics and Location Engine (ALE) (CVSS 7.2)
- [CVE-2026-76712](https://cve.now/CVE-2026-76712.md): Unauthenticated Remote Unauthorized Access, Information Disclosure, and Denial of Service Vulnerabilities in HPE Networking Analytics and Location Engine (ALE) (CVSS 7.3)
- [CVE-2026-76711](https://cve.now/CVE-2026-76711.md): Unauthenticated Remote Data Injection Vulnerability in HPE Networking Analytics and Location Engine (ALE) (CVSS 7.5)
- [CVE-2026-76710](https://cve.now/CVE-2026-76710.md): Unauthenticated Remote Sensitive Information Disclosure Vulnerability in HPE Networking Analytics and Location Engine (ALE) (CVSS 7.5)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/hewlett-packard-enterprise-hpe
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.