HPE security advisory (AV26-1046)
Canada's Cyber Centre urges patches for HPE NonStop, iLO, and AOS-Switch flaws.
On October 15, 2026, the Canadian Centre for Cyber Security issued advisory AV26-1046 covering vulnerabilities in several Hewlett Packard Enterprise products. Affected software includes NonStop HTTP WEBSERVER T1144L24^AAL and earlier, multiple NonStop servers, iLO 5 before 3.22, iLO 6 before 1.79, iLO 7 before 1.25.01, and AOS-Switch 16.11.0031 and earlier. The notice cites HPE bulletins HPESBNS05148, HPESBHF05170, and HPESBNW05156 but lists no CVE identifiers and does not report active exploitation. Administrators are urged to review the bulletins and apply updates.
- Covers NonStop HTTP WEBSERVER and multiple NonStop servers.
- iLO 5, 6, and 7 need the listed minimum versions.
- AOS-Switch 16.11.0031 and earlier are affected.
- The alert lists no CVEs and does not report exploitation.
From the original article
1 min read at cyber.gc.ca
Serial number: AV26-1046 Date: October 15, 2026 As of October 15, 2026, Hewlett Packard Enterprise is affected by vulnerabilities in the following products: HPE NonStop HTTP WEBSERVER Version T1144L24^AAL and prior HPE NonStop Servers Multiple versions and models HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers Versions prior to 3. 22 HPE Integrated Lights-Out 6 (iLO 6) Versions prior to 1.
cyber.gc.ca
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.