HPE Patches Dozens of Critical Flaws in Networking Products
Source SecurityWeek
Mentioned vulnerabilities
Rated Critical by SecurityWeek
Data as of 27 Oct 2026, 16:26 UTC
What to do
AI-suggested
HPE has released official patches in AOS versions 8.10.0.24, 8.13.3.1, 10.4.1.14, 10.7.2.7, and 10.8.1.2 that address all eight maximum-severity vulnerabilities and other issues. Customers should apply these updates as soon as possible. Additionally, HPE recommends restricting CLI and web-based management interfaces to dedicated layer 2 segments or VLANs and controlling access via firewall policies at layer 3 and above. Implementing accounting controls for tracking and logging user activities is also advised. No exploitation in the wild is currently known.
Description
HPE has released patches addressing 72 vulnerabilities in its Aruba networking products' AOS-8 and AOS-10 wireless operating systems, including eight maximum-severity flaws that could allow unauthenticated remote code execution and authentication bypass. These vulnerabilities affect various hardware and virtual machines compatible with these operating systems. HPE recommends restricting management interfaces and applying patches promptly. No exploitation in the wild has been reported.