Hewlett Packard Enterprise (HPE)

Products

ProductCVEsExploitedLatest
HPE OneView111Dec 16, 2025
ArubaOS (AOS)105–Oct 22, 2026
Fabric Composer98–Nov 3, 2026
Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central51–May 1, 2024
AOS-CX46–Sep 1, 2026
EdgeConnect SD-WAN Gateways38–Sep 15, 2026
ClearPass Policy Manager (CPPM)36–Oct 6, 2026
Aruba ClearPass Policy Manager33–Feb 27, 2024
EdgeConnect SD-WAN Orchestrator27–Aug 4, 2026
HPE Aruba Networking Wireless Operating System (AOS)27–May 12, 2026
Aruba EdgeConnect Enterprise Software23–May 16, 2023
Instant ON20–Sep 29, 2026
AOS-8 Instant and AOS-10 AP18–May 14, 2024
Aruba Access Points running InstantOS and ArubaOS 1016–Jul 25, 2023
Aruba Access Points: 100 Series; 103 Series; 110 Series; 120 Series; 130 Series; 200 Series; 207 Series; 210 Series; 220 Series; 260 Series; 300 Series; 303 Series; 310 Series; 318 Series Hardened Acc14–Nov 14, 2023
Aruba EdgeConnect Enterprise Orchestration Software13–Jan 3, 2023
Virtual Intranet Access (VIA)11–Nov 3, 2026
ALE10–Sep 22, 2026
HPE Aruba Networking ClearPass Policy Manager10–Feb 17, 2026
HPE Aruba Networking EdgeConnect SD-WAN Gateway9–Sep 16, 2025
AOS-Switch (AOS-S)9–Oct 6, 2026
HPE Athonet Core8–Mar 31, 2025
HPE StoreOnce Software8–Jun 2, 2025
ArubaOS Wi-Fi Controllers and Campus/Remote Access Points7–Mar 5, 2024
HPE Aruba Networking Access Points, Instant AOS-8, and AOS-106–Nov 5, 2024
HPE Aruba Networking AOS6–Apr 8, 2025
Aruba OS6–Sep 24, 2024
HPE Aruba Networking Private 5G Core5–Feb 17, 2026
HPE Insight Remote Support5–Nov 27, 2024
HPE Aruba Networking EdgeConnect SD-WAN5–Jul 24, 2024
HPE Aruba Networking InstantOS and Aruba Access Points running ArubaOS 105–Aug 6, 2024
HPE Aruba Networking AOS-CX5–Nov 18, 2025
HPE Aruba Networking Fabric Composer (AFC)5–Jan 28, 2025
9200 Series Mobility Controllers and SD-WAN Gateways, 9000 Series Mobility Controllers and SD-WAN Gateways3–Sep 6, 2023
HPE Aruba Networking Wireless Operating Systems (AOS-8 & AOS-10)3–Mar 4, 2026
HPE Nimble Storage Hybrid Flash Arrays; Nimble Storage Secondary Flash Arrays3–Nov 3, 2022
HPE Networking Instant On3–Jul 7, 2026
HPE Serviceguard for Linux3–Feb 22, 2023
HPE Aruba Networking Wireless Operating System (AOS-10 & AOS-8)3–Mar 4, 2026
EdgeConnect SD-WAN Gateway (ECOS)2–Jul 21, 2026
HPE Aruba Networking 100 Series Cellular Bridge2–Nov 18, 2025
AOS-10 AP2–Apr 8, 2025
HPE Telco Service Activator2–Jul 31, 2025
HPE Aruba Networking 501 Wireless Client Bridge2–Jan 7, 2025
HPE Aruba Networking Fabric Composer2–Jan 27, 2026
HPE Aruba Networking Virtual Intranet Access (VIA)2–Aug 15, 2023
HPE Cray Programming Environment1–Nov 5, 2026
HPE Telco Service Orchestrator1–Jul 16, 2025
HPE MC990 X RMC firmware1–Jun 16, 2023
HPE Integrated Lights-out 5 (iLO 5), HPE Integrated Lights-out 6 (iLO 6), 1–Dec 19, 2023
HPE Superdome Flex Server; HPE Superdome Flex 280 Server1–Jan 3, 2023
HPE Intelligent Provisioning (IP) for Gen91–Jul 18, 2023
HPE Cray Data Virtualization Service (DVS)1–Apr 22, 2025
HPE OneView Global Dashboard1–Apr 14, 2023
HPE Cray Operating System (COS)1–Apr 22, 2025
HPE Aruba Networking Management Software (Airwave)1–Nov 18, 2025
HPE Athonet Mobile Core1–Jun 25, 2024
HPE OneView for VMware vCenter,1–Feb 18, 2023
HP-UX1–Jun 16, 2023
Aruba CX Switches1–Aug 1, 2023
Hewlett Packard Enterprise OfficeConnect 1820, 1850, and 1920S Network switches1–Nov 30, 2022
HPE Integrated Lights-Out (iLO) 71–Oct 5, 2026
HPE Aruba Networkign AOS-CX1–Nov 18, 2025
HPE OfficeConnect 1820 and 1850 Switch Series1–Jan 3, 2023
HPE Integrated Lights-Out1–Oct 18, 2023
Private 5G Core1–Apr 7, 2026
HPE Alletra Storage MP B100001–Dec 19, 2024
HPE OneView Global Dashboard (OVGD)1–Nov 3, 2022
HPE ProLiant RL300 Gen111–May 1, 2023
ArubaOS-S Switch1–Mar 26, 2024
HPE Performance Cluster Manager (HPCM)1–Apr 22, 2025
HPE Integrated Lights-Out 51–Nov 3, 2022
Cray System Management Software1–Nov 15, 2024
SGI CXFS1–Nov 15, 2024
HPE Integrated Lights-Out 6 (iLO 6)1–Aug 5, 2026
HPE Aruba Networking AirWave Management Platform1–Dec 10, 2024
Aruba CX 10000 Switch Series, Aruba CX 9300 Switch Series, Aruba CX 8400 Switch Series, Aruba CX 8360 Switch Series, Aruba CX 8325 Switch Series, Aruba CX 8320 Switch Series, Aruba CX 6400 Switch Seri1–Mar 21, 2023
HPE 3PAR Service Processor1–Jul 16, 2024
HPE FlexFabric 5700 Switch Series1–Mar 15, 2023
ProLiant RL300 Gen11 Server1–Oct 14, 2025
Cray System Management Software - PALS1–Jun 13, 2024
Insight Remote Support1–Nov 26, 2024
HPE Superdome Flex Servers; HPE Superdome Flex 280 Servers1–Mar 8, 2023
IceWall Gen11, IceWall SSO Agent1–Mar 26, 2024
HPE HP-UX ONCplus1–Sep 9, 2024
HPE AutoPass License Server (APLS)1–Mar 2, 2026

Exploited and recent CVEs

  • CVE-2025-37164 Critical 10.0 Exploited A remote code execution issue exists in HPE OneView. 90.2%
  • CVE-2026-44875 High 7.8 In HPE Cray Programming Environment versions 25.03 and 25.09, prior to 26.03, the method that CPE is deployed on HPCM potentially allows elevated access by a local unprivileged user. 0.1%
  • CVE-2026-95730 Medium 6.5 Authenticated Buffer Overflow Vulnerability Leads to Denial-of-Service in HPE Networking VIA 0.3%
  • CVE-2026-95729 Medium 6.5 Authenticated Sensitive Information Disclosure in VIA 0.3%
  • CVE-2026-95728 High 7.1 Local Privilege Escalation in Virtual Intranet Access (VIA) Client for Linux 0.1%
  • CVE-2026-95727 High 7.2 Authenticated Command Injection Vulnerability in HPE Networking VIA 1.5%
  • CVE-2026-95726 High 7.5 Unauthenticated Buffer Overflow Vulnerability Leading to Denial-of-Service in HPE Networking VIA 0.5%
  • CVE-2026-95725 High 7.8 Authenticated Local Command Injection Vulnerability in the VIA Client for Linux 0.5%
  • CVE-2026-95724 High 8.1 Unauthenticated Improper Certificate Validation leads to Authentication Bypass in HPE Networking Virtual Intranet Access (VIA) 0.3%
  • CVE-2026-95723 High 8.4 Authenticated Local Missing Integrity Verification Vulnerability leads to Local Privilege Escalation in Virtual Intranet Access (VIA) Client 0.1%
  • CVE-2026-95722 High 8.8 Local Privilege Escalation Vulnerability in the Virtual Intranet Access (VIA) Client 0.1%
  • CVE-2026-95777 Low 3.1 Authenticated Sensitive Information Disclosure in HPE Networking Fabric Composer Management Interface 0.2%
  • CVE-2026-95776 Low 3.1 Authenticated Path Traversal Vulnerability in HPE Networking Fabric Composer API Allows for Limited File Read 0.2%
  • CVE-2026-95775 Low 3.3 Authenticated Local Information Disclosure Vulnerability in HPE Networking Fabric Composer <0.1%
  • CVE-2026-95774 Low 3.7 Unauthenticated Sensitive Information Disclosure in HPE Networking Fabric Composer 0.2%
  • CVE-2026-95773 Low 3.8 Authenticated Local Denial-of-Service Vulnerability in HPE Networking Fabric Composer <0.1%
  • CVE-2026-95772 Medium 4.2 Authenticated Race Condition in API of HPE Networking Fabric Composer 0.2%
  • CVE-2026-95771 Medium 4.3 Authenticated Information Disclosure in HPE Networking Fabric Composer API Endpoint 0.2%
  • CVE-2026-95770 Medium 4.7 Authenticated Local Sensitive Information Disclosure in HPE Networking Fabric Composer <0.1%
  • CVE-2026-95769 Medium 5.3 Unauthenticated Audit Log Spoofing in API of HPE Networking Fabric Composer 0.2%
  • CVE-2026-95768 Medium 5.3 Privilege Escalation Leading to Information Disclosure in HPE Networking Fabric Composer API 0.2%
  • CVE-2026-95767 Medium 5.3 Unauthenticated Information Disclosure in HPE Networking Fabric Composer 0.3%
  • CVE-2026-95766 Medium 5.3 Authenticated Sensitive Information Disclosure in HPE Networking Fabric Composer 0.2%
  • CVE-2026-95765 Medium 5.4 Unauthenticated Sensitive Information Disclosure in Web-Based Management Interface of HPE Networking Fabric Composer 0.2%
  • CVE-2026-95764 Medium 5.7 Unauthenticated Adjacent Improper Certificate Validation in HPE Networking Fabric Composer <0.1%
  • CVE-2026-95763 Medium 5.9 Unauthenticated Improper Certificate Validation allows Information Disclosure in HPE Networking Fabric Composer 0.2%
  • CVE-2026-95762 Medium 5.9 Authenticated Insufficient Session Expiration Vulnerability in the API of HPE Networking Fabric Composer 0.2%
  • CVE-2026-95761 Medium 5.9 Authenticated Improper Certificate Validation leads to Information Disclosure in HPE Networking Fabric Composer 0.1%
  • CVE-2026-95760 Medium 6.4 Privilege Escalation Vulnerability in HPE Networking Fabric Composer API 0.2%
  • CVE-2026-95759 Medium 6.5 Authenticated Audit Log Bypass in the API of HPE Networking Fabric Composer 0.3%