Hewlett Packard Enterprise (HPE) vulnerabilities
790 CVEs and advisories name Hewlett Packard Enterprise (HPE) as an affected vendor, 1 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-19766Authentication Bypass leads to Administrative control of adjacent network hosts in HPE Networking Fabric Composer
- CVE-2026-63457A potential denial of service vulnerability exists in HPE Integrated Lights-Out 6 (iLO 6) prior to v1.78.
- CVE-2026-63456Authentication bypass via spoofed HTTP headers Orchestrator REST API
- CVE-2026-63455Authentication bypass via spoofed HTTP headers Orchestrator REST API
- CVE-2026-44879Authenticated Command Injection allows arbitrary command execution in CLI Interface
- CVE-2026-44878Authenticated Path Traversal allows Unauthorized Access in Web Interface
- CVE-2026-63454Authenticated Path Traversal Vulnerability Leads to Remote Code Execution in AOS-CX
- CVE-2026-63453Authenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-CX
- CVE-2026-44880Low-Privilege Authenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-CX
- CVE-2026-44877Unauthenticated Remote Disclosure of Cryptographic Secrets
- CVE-2026-44871Authenticated Command Injection Vulnerabilities in Command Line Interface (CLI) Service Accessed by PAPI Protocol of AOS-8 and AOS-10 Operating Systems
- CVE-2026-44873Insufficient Session Invalidation on User Account Deactivation in AOS-8 Operating System
- CVE-2026-44874Authenticated Arbitrary File Download via AOS-10 Web-Based Management Interface
- CVE-2026-44872Authenticated Arbitrary File Upload via Command Injection in AOS-8 AND AOS-10 Web-Based Management Interface
- CVE-2026-44870Authenticated Command Injection Vulnerabilities in Command Line Interface (CLI) Service Accessed by PAPI Protocol of AOS-8 and AOS-10 Operating Systems
- CVE-2026-44869Authenticated Command Injection Vulnerabilities in the Web-Based Management Interface of AOS-8 and AOS-10
- CVE-2026-44868Authenticated Command Injection Vulnerabilities in the Web-Based Management Interface of AOS-8 and AOS-10
- CVE-2026-44867Authenticated Command Injection Vulnerabilities in the Web-Based Management Interface of AOS-8 and AOS-10
- CVE-2026-44866Authenticated Command Injection Vulnerabilities in the Web-Based Management Interface of AOS-8 and AOS-10
- CVE-2026-44865Authenticated Command Injection Vulnerabilities in the Web-Based Management Interface of AOS-8 and AOS-10
- CVE-2026-44864Authenticated Remote Code Execution via SQL Injection in AOS-8 and AOS-10 Operating Systems
- CVE-2026-44863Authenticated Remote Code Execution via SQL Injection in AOS-8 and AOS-10 Operating Systems
- CVE-2026-44862Authenticated Remote Code Execution via SQL Injection in AOS-8 and AOS-10 Operating Systems
- CVE-2026-44861Authenticated Remote Code Execution via SQL Injection in AOS-8 and AOS-10 Operating Systems
- CVE-2026-44860Authenticated Remote Code Execution via SQL Injection in AOS-8 and AOS-10 Operating Systems
- CVE-2026-44859Authenticated Stack-Based Buffer Overflow in PAPI Services
- CVE-2026-44858Authenticated Stack-Based Buffer Overflow in PAPI Services
- CVE-2026-44857Authenticated Stack-Based Buffer Overflow in PAPI Services
- CVE-2026-44856Authenticated Stack-Based Buffer Overflow in PAPI Services
- CVE-2026-44855Authenticated Stack-Based Buffer Overflow in PAPI Services