HPE Networking Fabric Composer and VIA affected by multiple vulnerabilities
HPE Networking Fabric Composer (AFC) and Virtual Intranet Access (VIA) versions prior to 7.3.5 and 4.7.9 contain multiple vulnerabilities.
Stories per day · 30 days
4 RSS
Relatedaos4authentication-bypass4aruba3networking2advisory1ai-costs1aos-101aos-81aos-switch1arubaos1buffer-overflow1canada1coding-agents1command-injection1enterprise-ai1fabric-composer1gpu-utilization1ilo1
23 stories, newest first · one card per story
Stories tagged #hpe
Stop counting tokens start counting what ships
AI coding agents should be measured by cost per merged pull request rather than tokens consumed to track value delivered.
1
HPE patches 72 Aruba AOS flaws, eight at maximum severity
Unauthenticated attackers could gain remote code execution or admin access; HPE reports no known exploitation.
HPE patches critical Aruba AOS flaws that can fully control devices
Eight CVEs score CVSS 10.0; unauthenticated AOS-8 flaws can run commands as root, and HPE knew of no public exploit code.
HPE Networking Wireless AOS has multiple flaws in older releases
Canadian Cyber Centre alert AV26-1079 points administrators to HPE bulletin HPESBNW05162 rev.1 for fixes.
HPE patches eight maximum-severity RCE and auth-bypass flaws in ArubaOS
The eight flaws hit AOS-8 and AOS-10 and can be exploited remotely without privileges or user interaction.
HPE patches Aruba AOS-8 SSH authentication bypass and dozens of other flaws
Bulletin HPESBNW05162 covers 72 AOS-8 and AOS-10 flaws, several scored CVSS 10.0 for unauthenticated remote code execution.
HPE argues enterprises should track cost per useful AI outcome
The sponsored piece promotes HPE Private Cloud AI and says commissioned tests found a lower effective cost per token at high utilization.
1
HPE security advisory (AV26-1046)
Canada's Cyber Centre urges patches for HPE NonStop, iLO, and AOS-Switch flaws.
HPE security advisory (AV26-1025)
Canada's Cyber Centre warns of an HPE iMC remote authentication bypass and Intelligent Assurance flaws.
HPE security advisory (AV26-1011)
Canada's Cyber Centre urges updates for vulnerabilities in HPE AOS-Switch and ClearPass Policy Manager.
HPE security advisory (AV26-1000)
Canada's Cyber Centre flagged a user-validation flaw in HPE iLO 7 before version 1.25.00.
HPE security advisory (AV26-982)
Canadian Cyber Centre advisory AV26-982 relays HPE bulletins covering multiple vulnerabilities, including remote command execution, across servers and networking products.
HPE Instant On AP Flaws Let Unauthenticated Attackers Execute Arbitrary Commands
HPE patched 18 Instant On AP flaws, including unauthenticated remote code execution scored CVSS 9.8.
Making AI an asset, not an expense
HPE-sponsored essay argues enterprises should own AI capacity once production demand is steady and predictable.
4
HPE Networking ALE Flaws Let Hackers Bypass Security Controls and Compromise Systems
HPE fixed critical unauthenticated flaws in Networking ALE that enable credential abuse and arbitrary file writes.
HPE security advisory (AV26-951)
Canada's Cyber Centre warns of HPE ALE and Telco Orchestrator flaws, including a remote denial of service.
HPE Networking Analytics Engine Flaws Let Attackers Gain Root Access
HPE patched ten Analytics Engine flaws, including unauthenticated bugs that can give attackers root.
HPE security advisory (AV26-928)
Canada's Cyber Centre relayed an HPE advisory covering multiple vulnerabilities in EdgeConnect SD-WAN Gateways and Orchestrator, urging prompt updates.
Critical HPE Vulnerabilities Allow Remote Attackers to Achieve Complete System Compromise
HPE patched critical EdgeConnect SD-WAN flaws, including CVSS 9.8 unauthenticated API bypass and gateway RCE, enabling full system compromise.
3
HPE security advisory (AV26-909)
Canada's Cyber Centre relayed HPE advisories covering vulnerabilities in Aruba ClearPass Policy Manager and HPE IceWall products.
CVE-2026-73749: HPE ArubaOS-CX RCE
HPE patched CVE-2026-73749, a critical unauthenticated remote code execution flaw in ArubaOS-CX network switch software; affected devices need prompt updates.
HPE security advisory (AV26-873)
Canada's Cyber Centre relays HPE advisories covering multiple vulnerabilities in Aruba AOS-CX switches and Fabric Composer, urging updates.