Known vulnerabilities in Hewlett Packard Enterprise (HPE) Unknown product
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-79890 | There are command injection vulnerabilities in AOS-8 that could lead to unauthenticated remote code execution by sending… | 8.1 High | Oct 22, 2026 |
| CVE-2026-79889 | Vulnerabilities in multiple web interface endpoints of AOS-8 devices could allow an unauthenticated remote attacker to… | 8.1 High | Oct 22, 2026 |
| CVE-2026-79888 | A vulnerability in a certain web interface endpoint of AOS-8 devices could allow an unauthenticated remote attacker to… | 8.1 High | Oct 22, 2026 |
| CVE-2026-79887 | A vulnerability in the web interface of AOS-8 could allow an unauthenticated remote attacker to achieve remote code… | 8.1 High | Oct 22, 2026 |
| CVE-2026-79886 | An unauthenticated buffer overflow vulnerability exists in the PAPI protocol of AOS-8 | 8.2 High | Oct 22, 2026 |
| CVE-2026-79885 | An unauthenticated file write vulnerability exists in the PAPI protocol in AOS-8 | 8.2 High | Oct 22, 2026 |
| CVE-2026-79884 | A vulnerability in the web-based management interface of AOS-8 could allow an unauthenticated adjacent attacker to… | 8.2 High | Oct 22, 2026 |
| CVE-2026-79883 | A buffer overflow vulnerability in the PAPI protocol of HPE Networking AOS-10 could allow an unauthenticated adjacent… | 8.3 High | Oct 22, 2026 |
| CVE-2026-79882 | There is a command injection vulnerability in the PAPI protocol of AOS-10 that could lead to unauthenticated remote code… | 8.3 High | Oct 22, 2026 |
| CVE-2026-79881 | An authentication bypass vulnerability in the underlying operating system of AOS-8 could allow an unauthenticated remote… | 8.5 High | Oct 22, 2026 |
| CVE-2026-79880 | A vulnerability in the command line interface of AOS-8 could allow an authenticated remote attacker with high privileges… | 8.7 High | Oct 22, 2026 |
| CVE-2026-79879 | Memory corruption vulnerabilities in the affected interface of AOS-10 could lead to remote code execution by an… | 8.8 High | Oct 22, 2026 |
| CVE-2026-79878 | A command injection vulnerability in the AOS-8 command line interface accessed by the PAPI protocol could lead to… | 8.8 High | Oct 22, 2026 |
| CVE-2026-79877 | A remote code execution vulnerability in the underlying operating system of AOS-10 could allow an unauthenticated… | 8.8 High | Oct 22, 2026 |
| CVE-2026-79876 | A sensitive information disclosure vulnerability in the Wi-Fi frame processing of AOS-10 could allow an… | 9.3 Critical | Oct 22, 2026 |
| CVE-2026-79875 | A vulnerability has been identified in the PAPI protocol of AOS-8 that could potentially allow an unauthenticated… | 9.3 Critical | Oct 22, 2026 |
| CVE-2026-79874 | An authentication bypass in the API of AOS-10 allows an unauthenticated adjacent attacker to circumvent existing… | 9.3 Critical | Oct 22, 2026 |
| CVE-2026-79873 | Authentication bypass vulnerabilities in the PAPI protocol of AOS-10 could allow an unauthenticated adjacent attacker to… | 9.3 Critical | Oct 22, 2026 |
| CVE-2026-79872 | A buffer overflow vulnerability exists in the underlying operating system of AOS that could lead to unauthenticated… | 9.4 Critical | Oct 22, 2026 |
| CVE-2026-79871 | A sensitive information disclosure vulnerability in the command line interface of AOS-10 could allow an… | 9.6 Critical | Oct 22, 2026 |
| CVE-2026-79870 | An authentication bypass vulnerability in the PAPI protocol of AOS-8 could allow an unauthenticated adjacent attacker to… | 9.6 Critical | Oct 22, 2026 |
| CVE-2026-79869 | Authentication bypass vulnerabilities in the affected interface of AOS-10 could allow an unauthenticated adjacent… | 9.6 Critical | Oct 22, 2026 |
| CVE-2026-79868 | Authentication bypass vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated adjacent… | 9.6 Critical | Oct 22, 2026 |
| CVE-2026-79867 | Authentication bypass vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated adjacent… | 9.6 Critical | Oct 22, 2026 |
| CVE-2026-79866 | An unauthenticated path traversal vulnerability exists in the PAPI protocol in AOS-8 | 9.6 Critical | Oct 22, 2026 |
Other Hewlett Packard Enterprise (HPE) products
ArubaOS (AOS) 105
Fabric Composer 98
Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central 51
AOS-CX 46
EdgeConnect SD-WAN Gateways 38
ClearPass Policy Manager (CPPM) 36
Aruba ClearPass Policy Manager 33
EdgeConnect SD-WAN Orchestrator 27
HPE Aruba Networking Wireless Operating System (AOS) 27
Aruba EdgeConnect Enterprise Software 23
Instant On 20
AOS-8 Instant and AOS-10 AP 18