ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode
Story · 1 source · 2 articlesfirst updated ()

Canadian Cyber Centre relays HPE advisories for Aruba ClearPass, IceWall, and EdgeConnect SD-WAN vulnerabilities

mediumAdvisoryimportance 30
What's new: Follow-up advisory AV26-928 (September 16, 2026) extends the Cyber Centre's HPE coverage beyond the ClearPass Policy Manager and IceWall issues relayed in AV26-909 (September 10, 2026) to multiple vulnerabilities in EdgeConnect SD-WAN Gateways and Orchestrator, tracked under HPE bulletin HPESBNW05135 rev.1. This is the first merged summary for this story.
Merged summary · glm-5.3-flash · rewritten as coverage arrives

Canada's Cyber Centre issued two advisories relaying HPE security bulletins: AV26-909 (Sept 10, 2026) covering multiple Aruba ClearPass Policy Manager and HPE IceWall vulnerabilities, and AV26-928 (Sept 16, 2026) covering multiple vulnerabilities in…

On September 10, 2026, the Canadian Centre for Cyber Security published advisory AV26-909 flagging HPE product vulnerabilities disclosed on September 9, 2026. Affected products include Aruba ClearPass Policy Manager versions prior to or equal to 6.11.14 and 6.12.8, and multiple HPE IceWall versions and models. The bulletins cover multiple ClearPass vulnerabilities, a remote bypass of security restrictions in IceWall, and an IceWall denial-of-service vulnerability. On September 16, 2026, the Cyber Centre published advisory AV26-928, noting that as of September 15, 2026, HPE is affected by multiple vulnerabilities in HPE Networking EdgeConnect SD-WAN Gateways and Orchestrator across multiple versions, per HPE bulletin HPESBNW05135 rev.1. Neither Canadian advisory text lists CVE identifiers, and no exploitation details are provided for the EdgeConnect issues. In both advisories, users and administrators are encouraged to review the linked HPE security bulletins and apply available updates as they become available.

  • Advisory AV26-909 (September 10, 2026) covers HPE vulnerabilities disclosed on September 9, 2026.
  • Aruba ClearPass Policy Manager versions prior to or equal to 6.11.14 and 6.12.8 are affected by multiple vulnerabilities.
  • HPE IceWall flaws include a remote bypass of security restrictions and a denial-of-service vulnerability, affecting multiple IceWall versions and models.
  • Advisory AV26-928 (September 16, 2026) relays HPE bulletin HPESBNW05135 rev.1, reflecting the situation as of September 15, 2026.
  • Products affected per AV26-928: HPE Networking EdgeConnect SD-WAN Gateways and Orchestrator, across multiple versions.
  • No CVE identifiers are listed in the text of either Canadian advisory; no exploitation details are provided.
VendorsHPEHewlett Packard EnterpriseHPE Aruba NetworkingCanadian Centre for Cyber Security
ProductsEdgeConnect SD-WAN GatewayEdgeConnect SD-WAN OrchestratorClearPass Policy ManagerHPE IceWall
OrganizationsCanadian Centre for Cyber Security
CountriesCanada

Coverage timeline

  1. · 6d ago
    Canadian Centre for Cyber Security· 30
    HPE security advisory (AV26-909)

    Canada's Cyber Centre relayed HPE advisories covering vulnerabilities in Aruba ClearPass Policy Manager and HPE IceWall products.

  2. · 9h ago
    Canadian Centre for Cyber Security· 30
    HPE security advisory (AV26-928)

    Canada's Cyber Centre relayed an HPE advisory covering multiple vulnerabilities in EdgeConnect SD-WAN Gateways and Orchestrator, urging prompt updates.