HPE security advisory (AV26-1000)
Canada's Cyber Centre flagged a user-validation flaw in HPE iLO 7 before version 1.25.00.
The Canadian Centre for Cyber Security issued advisory AV26-1000 on October 5, 2026, for HPE Integrated Lights-Out (iLO) 7 versions before 1.25.00. HPE security bulletin HPESBHF05163 rev.1 describes a user validation failure when using COM. The centre urges administrators to review HPE's links and install necessary updates. The alert does not name a CVE or report active exploitation.
- Affects HPE iLO 7 versions before 1.25.00.
- HPE bulletin HPESBHF05163 describes a COM user-validation failure.
- Canadian Cyber Centre serial number is AV26-1000, dated October 5, 2026.
- Administrators are urged to apply updates; exploitation is not reported.
- Vendors
- HPE
- Products
- HPE Integrated Lights-Out 7iLO 7
- Countries
- Canada
From the original article
1 min read at cyber.gc.ca
Serial Number: AV26-1000 Date: October 5, 2026 As of October 5, 2026, Hewlett Packard Enterprise (HPE) is affected by a vulnerability in the following product: HPE Integrated Lights-Out (iLO) 7 Prior to 1. 25. 00 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.
cyber.gc.ca
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.