CVEs published by Hewlett Packard Enterprise (HPE)

CVEs published by Hewlett Packard Enterprise (HPE) (CVE Numbering Authority). 74 tracked.

• CVE-2026-95714 MEDIUM 6.8 A buffer overflow vulnerability exists in the API of AOS-10 that could allow an authenticated adjacent attacke
• CVE-2026-95711 HIGH 7.1 An authentication bypass vulnerability in the web-based management interface of AOS-10 could allow an unauthen
• CVE-2026-95709 HIGH 7.2 Command injection vulnerabilities exist in the affected interface of AOS-10 that could allow an authenticated
• CVE-2026-95708 HIGH 7.2 Command injection vulnerabilities exist in the affected interface of AOS-10 that could allow an authenticated
• CVE-2026-95707 HIGH 7.2 A buffer overflow vulnerability in the PAPI protocol of AOS-8 could allow an authenticated remote attacker wit
• CVE-2026-95706 HIGH 7.2 Command injection vulnerabilities in the affected interface of AOS-8 could allow an authenticated remote attac
• CVE-2026-95705 HIGH 7.2 Command injection vulnerabilities in the affected interface of AOS-8 could allow an authenticated remote attac
• CVE-2026-95704 HIGH 7.2 A vulnerability in the web-based management interface of wireless network management systems could allow an au
• CVE-2026-79956 HIGH 7.2 A vulnerability in the CLI command handling of the AOS-8 web interface could allow an authenticated remote att
• CVE-2026-79892 HIGH 7.8 A memory corruption vulnerability exists in AOS-8 that could allow an authenticated local attacker to execute
• CVE-2026-79891 HIGH 8.1 A buffer overflow vulnerability exists in the command line interface of AOS-8 that could allow an unauthentica
• CVE-2026-79890 HIGH 8.1 There are command injection vulnerabilities in AOS-8 that could lead to unauthenticated remote code execution
• CVE-2026-79889 HIGH 8.1 Vulnerabilities in multiple web interface endpoints of AOS-8 devices could allow an unauthenticated remote att
• CVE-2026-79888 HIGH 8.1 A vulnerability in a certain web interface endpoint of AOS-8 devices could allow an unauthenticated remote att
• CVE-2026-79887 HIGH 8.1 A vulnerability in the web interface of AOS-8 could allow an unauthenticated remote attacker to achieve remote
• CVE-2026-79858 CRITICAL 9.8 An unauthenticated SQL injection vulnerability exists in the PAPI protocol in AOS-8
• CVE-2026-79857 CRITICAL 9.8 There is a command injection vulnerability in the PAPI protocol (Aruba's access point management protocol) of
• CVE-2026-79856 CRITICAL 9.8 A buffer overflow vulnerability exists in the PAPI protocol of AOS-8 that could allow an unauthenticated remot
• CVE-2026-79855 CRITICAL 9.8 An authentication bypass vulnerability in the SSH daemon of AOS-8 allows an unauthenticated remote attacker to
• CVE-2026-79854 CRITICAL 9.8 A vulnerability in the affected interface of AOS-10 could allow an unauthenticated remote attacker to conduct
• CVE-2026-79852 CRITICAL 9.8 A vulnerability in the web-based management interface of AOS could allow an unauthenticated remote attacker to
• CVE-2026-63455 CRITICAL 9.8 Multiple vulnerabilities in the REST API interface of HPE Networking SD-WAN Orchestrator could allow an unauth
• CVE-2026-63456 CRITICAL 9.8 Multiple vulnerabilities in the REST API interface of HPE Networking SD-WAN Orchestrator could allow an unauth
• CVE-2026-63457 MEDIUM 6.5 UPGRADE A potential denial of service vulnerability exists in HPE Integrated Lights-Out 6 (iLO 6) prior to v1.78.
• CVE-2026-95721 LOW 3.3 A memory corruption vulnerability exists in the web-based management interface of AOS-8
• CVE-2026-95720 MEDIUM 4.4 A buffer overflow vulnerability exists in AOS-8 that could allow an authenticated attacker with administrative
• CVE-2026-95719 MEDIUM 4.9 An arbitrary file deletion vulnerability exists in the command line interface of AOS-10 that could allow an au
• CVE-2026-95718 MEDIUM 5.3 An authentication bypass vulnerability in the PAPI protocol of AOS-8 could allow an unauthenticated remote att
• CVE-2026-95717 MEDIUM 5.5 A stored cross-site scripting (XSS) vulnerability exists in the web-based management interface of AOS that cou
• CVE-2026-95716 MEDIUM 6.5 An authentication bypass in the PAPI protocol of AOS-10 allows an unauthenticated adjacent attacker to circumv
• CVE-2026-95715 MEDIUM 6.8 An unauthenticated command injection vulnerability exists in the command line interface of AOS-10
• CVE-2026-95713 HIGH 7.0 An unauthenticated buffer overflow vulnerability exists in the command line interface of AOS-8
• CVE-2026-95712 HIGH 7.1 A sensitive information disclosure vulnerability in the PAPI protocol of AOS-8 could allow an unauthenticated
• CVE-2026-95710 HIGH 7.1 An unauthenticated buffer overflow vulnerability exists in the underlying operating system of AOS-10 or AOS-8
• CVE-2026-79955 HIGH 7.5 An unauthenticated memory corruption vulnerability exists in a service accessed via the PAPI protocol in AOS-8
• CVE-2026-79895 HIGH 7.5 Vulnerabilities in the affected interface of AOS-10 could allow an unauthenticated remote attacker to conduct
• CVE-2026-79894 HIGH 7.5 An unauthenticated Denial-of-Service (DoS) vulnerability exists in the PAPI protocol of AOS-8
• CVE-2026-79893 HIGH 7.5 Memory corruption vulnerabilities in AOS-10 could allow an unauthenticated remote attacker to conduct a denial
• CVE-2026-79886 HIGH 8.2 An unauthenticated buffer overflow vulnerability exists in the PAPI protocol of AOS-8
• CVE-2026-79885 HIGH 8.2 An unauthenticated file write vulnerability exists in the PAPI protocol in AOS-8
• CVE-2026-79884 HIGH 8.2 A vulnerability in the web-based management interface of AOS-8 could allow an unauthenticated adjacent attacke
• CVE-2026-79883 HIGH 8.3 A buffer overflow vulnerability in the PAPI protocol of HPE Networking AOS-10 could allow an unauthenticated a
• CVE-2026-79882 HIGH 8.3 There is a command injection vulnerability in the PAPI protocol of AOS-10 that could lead to unauthenticated r
• CVE-2026-79881 HIGH 8.3 An authentication bypass vulnerability in the underlying operating system of AOS-8 could allow an unauthentica
• CVE-2026-79880 HIGH 8.7 A vulnerability in the command line interface of AOS-8 could allow an authenticated remote attacker with high
• CVE-2026-79879 HIGH 8.8 Memory corruption vulnerabilities in the affected interface of AOS-10 could lead to remote code execution by a
• CVE-2026-79878 HIGH 8.8 A command injection vulnerability in the AOS-8 command line interface accessed by the PAPI protocol could lead
• CVE-2026-79877 HIGH 8.8 A remote code execution vulnerability in the underlying operating system of AOS-10 could allow an unauthentica
• CVE-2026-79876 CRITICAL 9.3 A sensitive information disclosure vulnerability in the Wi-Fi frame processing of AOS-10 could allow an unauth
• CVE-2026-79875 CRITICAL 9.3 A vulnerability has been identified in the PAPI protocol of AOS-8 that could potentially allow an unauthentica
• CVE-2026-79874 CRITICAL 9.3 An authentication bypass in the API of AOS-10 allows an unauthenticated adjacent attacker to circumvent existi
• CVE-2026-79873 CRITICAL 9.3 Authentication bypass vulnerabilities in the PAPI protocol of AOS-10 could allow an unauthenticated adjacent a
• CVE-2026-79872 CRITICAL 9.4 A buffer overflow vulnerability exists in the underlying operating system of AOS that could lead to unauthenti
• CVE-2026-79871 CRITICAL 9.6 A sensitive information disclosure vulnerability in the command line interface of AOS-10 could allow an unauth
• CVE-2026-79870 CRITICAL 9.6 An authentication bypass vulnerability in the PAPI protocol of AOS-8 could allow an unauthenticated adjacent a
• CVE-2026-79869 CRITICAL 9.6 Authentication bypass vulnerabilities in the affected interface of AOS-10 could allow an unauthenticated adjac
• CVE-2026-79868 CRITICAL 9.6 Authentication bypass vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated adjace
• CVE-2026-79867 CRITICAL 9.6 Authentication bypass vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated adjace
• CVE-2026-79866 CRITICAL 9.6 An unauthenticated path traversal vulnerability exists in the PAPI protocol in AOS-8
• CVE-2026-79865 CRITICAL 9.6 A memory corruption vulnerability in the affected interface of AOS-10 could allow an unauthenticated adjacent
• CVE-2026-79864 CRITICAL 9.6 Command injection vulnerabilities exist in the affected interface of AOS-10 that could allow an unauthenticate
• CVE-2026-79863 CRITICAL 9.6 Buffer overflow vulnerabilities in the affected interface of AOS-10 or AOS-8 could allow an unauthenticated ad
• CVE-2026-79862 CRITICAL 9.6 Buffer overflow vulnerabilities in the affected interface of AOS-10 or AOS-8 could allow an unauthenticated ad
• CVE-2026-79861 CRITICAL 9.8 There is a command injection vulnerability in AOS-10 that could lead to unauthenticated remote code execution
• CVE-2026-79860 CRITICAL 9.8 Buffer overflow vulnerabilities exist in an underlying service of AOS-8 that could lead to unauthenticated rem
• CVE-2026-79859 CRITICAL 9.8 Buffer overflow vulnerabilities exist in the affected interface of AOS-8 that could lead to unauthenticated re
• CVE-2026-79853 CRITICAL 9.8 Sensitive information disclosure vulnerabilities in the affected interface of AOS-10 could allow an unauthenti
• CVE-2026-79851 CRITICAL 10.0 Buffer overflow vulnerabilities exist in the affected interface of AOS-10 that could lead to unauthenticated r
• CVE-2026-79850 CRITICAL 10.0 Vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated remote attacker to bypass ex
• CVE-2026-79849 CRITICAL 10.0 Vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated remote attacker to conduct S
• CVE-2026-79848 CRITICAL 10.0 Vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated remote attacker to conduct S
• CVE-2026-79847 CRITICAL 10.0 Buffer overflow vulnerabilities in the affected interface of AOS-10 could lead to unauthenticated remote code
• CVE-2026-79846 CRITICAL 10.0 Command injection vulnerabilities exist in the affected interface of AOS-8 that could allow an unauthenticated
• CVE-2026-79844 CRITICAL 10.0 Authentication bypass vulnerabilities in the affected interface of AOS-10 could allow an unauthenticated remot

← Back to latest CVEs