HPE security advisory (AV26-1025)
Canada's Cyber Centre warns of an HPE iMC remote authentication bypass and Intelligent Assurance flaws.
The Canadian Centre for Cyber Security published advisory AV26-1025 on October 9, 2026, covering HPE vulnerabilities known as of October 8. HPE Intelligent Management Center versions before 7.3 E0713 are affected by a remote authentication bypass, bulletin HPESBNW05157. HPE Intelligent Assurance FAS/PDO v4.2.17 and earlier, also called HPE Telco Intelligent Assurance, has multiple vulnerabilities under bulletin HPESBNW05165. The centre urges administrators to review the bulletins and apply updates; it does not report active exploitation.
- HPE iMC before 7.3 E0713 has a remote authentication bypass.
- Intelligent Assurance FAS/PDO v4.2.17 and earlier has multiple flaws.
- Canadian advisory AV26-1025 cites HPE bulletins HPESBNW05157 and HPESBNW05165.
- The alert does not report exploitation in the wild.
From the original article
1 min read at cyber.gc.ca
Serial number: AV26-1025 Date: October 9, 2026 As of October 8, 2026, Hewlett Packard Enterprise is affected by vulnerabilities in the following products: HPE Intelligent Management Center (iMC) Prior to 7. 3 E0713 HPE Intelligent Assurance FAS/PDO Version v4. 2.
cyber.gc.ca
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.