Hewlett Packard Enterprise (HPE) vulnerabilities
790 CVEs and advisories name Hewlett Packard Enterprise (HPE) as an affected vendor, 1 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-44854Authenticated Remote Code Execution via Arbitrary File Write in AOS-8 and AOS-10 Web-Based Management Interface
- CVE-2026-44853Authenticated Remote Code Execution via Arbitrary File Write in AOS-8 and AOS-10 Web-Based Management Interface
- CVE-2026-44852Authenticated Remote Code Execution via Arbitrary File Overwrite in the AOS-8 and AOS-10 Web-Based Management Interface
- CVE-2026-23827Unauthenticated Remote Code Execution via Heap Buffer Overflow in Network Management Service
- CVE-2026-23826Unauthenticated Denial of Service in AOS-8 Network Management Service
- CVE-2026-23825Unauthenticated Denial-of-Service via Crafted Messages in a Network Protocol Handling Component
- CVE-2026-23824Unauthenticated Denial-of-Service via Crafted Messages in a Network Protocol Handling Component
- CVE-2026-23823Authenticated Command Injection leads to RCE in AOS-10 CLI Command
- CVE-2026-23822Unauthenticated XML External Entity Injection in AOS-8 Instant allows Denial of Service
- CVE-2026-23821Inconsistent input filtering allows Authenticated Command Injection in AOS-10 CLI
- CVE-2026-23820Inconsistent input filtering allows Authenticated Command Injection in AOS-8 Instant and AOS-10 CLI
- CVE-2026-23819Error in SSID Processing allows Stored XSS in Web Management Interface
- CVE-2026-23818Open Redirect Vulnerability in HPE Aruba Networking Private 5G Core On-Prem
- CVE-2026-23817Unauthenticated Open Redirect allows URL Manipulation in Web Interface
- CVE-2026-23816Authenticated Command Injection found in admin AOS-CX CLI command
- CVE-2026-23815Authenticated Command Injection found in AOS-CX Administrative CLI Command
- CVE-2026-23814Authenticated Command Injection found in AOS-CX CLI Command
- CVE-2026-23813Authentication Bypass in Web Interface allows Unauthenticated Admin Password Reset
- CVE-2026-23812Security Boundary Bypass via Routing Node Impersonation
- CVE-2026-23811Unauthorized Bi-Directional Traffic Interception via L2/L3 Manipulation
- CVE-2026-23810Cross-BSSID GTK Re-encryption and Traffic Injection
- CVE-2026-23809MAC Address Spoofing leads to Inter-BSSID Isolation Bypass Resulting in Traffic Redirection
- CVE-2026-23808Client Isolation Bypass via GTK Manipulation
- CVE-2026-23601Frame Injection via Shared GTK Allows Traffic Spoofing and Client Compromise
- CVE-2026-23600A remote authentication bypass vulnerability exists in HPE AutoPass License Server (APLS).
- CVE-2026-23599Local Privilege Escalation Vulnerability in HPE Aruba Networking Clear Pass Policy Manager OnGuard for Linux
- CVE-2026-23598Unauthenticated Information Disclosure in application API allows sensitive system information exposure
- CVE-2026-23597Unauthenticated Information Disclosure in application API allows sensitive system information exposure
- CVE-2026-23596Unauthenticated Improper Access Control in management API allows unauthorized service disruption
- CVE-2026-23595Unauthenticated Authentication Bypass in application API allows unauthorized administrative account creation