Hpe

Don't miss out!

Thousands of developers use stack.watch to stay informed.
Get an email whenever new security vulnerabilities are reported in any Hpe product.

RSS Feeds for Hpe security vulnerabilities

Create a CVE RSS feed including security vulnerabilities found in Hpe products with stack.watch. Just hit watch, then grab your custom RSS feed url.

Products by Hpe Sorted by Most Security Vulnerabilities since 2018

Hpe Arubaos94 vulnerabilities

Hpe Insight Remote Support9 vulnerabilities

Hpe Autopass License Server8 vulnerabilities

Hpe Storeonce System8 vulnerabilities

Hpe Hpux Ntp4 vulnerabilities

Hpe Integrated Lights Out 5 Firmware4 vulnerabilities

Hpe 3par Service Provider2 vulnerabilities

Hpe Performance Cluster Manager1 vulnerability

Hpe Cray Parallel Application Launch Service1 vulnerability

Hpe Arubaos Cx1 vulnerability

By the Year

In 2026 there have been 399 vulnerabilities in Hpe with an average score of 7.4 out of ten. Last year, in 2025 Hpe had 60 security vulnerabilities published. That is, 339 more vulnerabilities have already been reported in 2026 as compared to last year. However, the average CVE base score of the vulnerabilities in 2026 is greater by 0.28.

Year	Vulnerabilities	Average Score
2026	399	7.38
2025	60	7.09
2024	7	8.81
2023	10	7.84
2022	11	7.44
2021	4	6.15
2020	3	6.90
2019	18	7.63
2018	234	0.00

It may take a day or so for new Hpe vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.

Recent Hpe Security Vulnerabilities

CVE	Date	Vulnerability	Products
CVE-2026-95721	Oct 22, 2026	CVE-2026-95721 HPE unclassified vulnerability A memory corruption vulnerability exists in the web-based management interface of AOS-8. Successful exploitation could allow an authenticated low privilege attacker with local access to view some system files and interrupt the normal operation of the affected service.	Arubaos
CVE-2026-95720	Oct 22, 2026	CVE-2026-95720: HPE Security Flaw A buffer overflow vulnerability exists in AOS-8 that could allow an authenticated attacker with administrative access to cause denial of service. Successful exploitation could allow an attacker to crash the system, preventing it from rebooting without manual intervention and disrupting network operations.	Arubaos
CVE-2026-95719	Oct 22, 2026	CVE-2026-95719: Unspecified Vulnerability in HPE Product An arbitrary file deletion vulnerability exists in the command line interface of AOS-10 that could allow an authenticated attacker with administrative privileges to cause a denial of service. Successful exploitation could allow an attacker to crash the system, preventing it from rebooting without manual intervention and disrupting normal operation of the affected device.	Arubaos
CVE-2026-95718	Oct 22, 2026	CVE-2026-95718: HPE Security Vulnerability An authentication bypass vulnerability in the PAPI protocol of AOS-8 could allow an unauthenticated remote attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to make limited unauthorized modifications to certain settings of the affected system.	Arubaos
CVE-2026-95717	Oct 22, 2026	Unknown HPE Vulnerability A stored cross-site scripting (XSS) vulnerability exists in the web-based management interface of AOS that could allow an authenticated remote attacker with high privileges to inject malicious scripts. Successful exploitation could allow an attacker to execute arbitrary script code in the context of another authenticated user's browser session.	Arubaos
CVE-2026-95716	Oct 22, 2026	HPE CVE-2026-95716: Potential Vulnerability An authentication bypass in the PAPI protocol of AOS-10 allows an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation allows an attacker to change the state of certain settings of a vulnerable system.	Arubaos
CVE-2026-95715	Oct 22, 2026	Non-Described Vulnerability in HPE Product An unauthenticated command injection vulnerability exists in the command line interface of AOS-10. Successful exploitation could allow an attacker with physical access to execute arbitrary commands as a privileged user on the underlying operating system leading to complete system compromise.	Arubaos
CVE-2026-95714	Oct 22, 2026	Unknown CVE in HPE Product: Security Vulnerability A buffer overflow vulnerability exists in the API of AOS-10 that could allow an authenticated adjacent attacker with high privileges to achieve remote code execution. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system.	Arubaos
CVE-2026-95713	Oct 22, 2026	CVE-2026-95713: HPE Vulnerability in Unknown Component An unauthenticated buffer overflow vulnerability exists in the command line interface of AOS-8. Successful exploitation could allow an unauthenticated remote attacker to disrupt the availability of the affected interface, along with limited access to or modification of some system data.	Arubaos
CVE-2026-95712	Oct 22, 2026	HPE Software Vulnerability: Potential RCE (CVE-2026-95712) A sensitive information disclosure vulnerability in the PAPI protocol of AOS-8 could allow an unauthenticated adjacent attacker to access limited information handled by the affected service. Successful exploitation could allow an attacker to view some information and to disrupt the availability of the affected service.	Arubaos
CVE-2026-95711	Oct 22, 2026	HPE CVE-2026-95711 Vulnerability in Unknown Component An authentication bypass vulnerability in the web-based management interface of AOS-10 could allow an unauthenticated adjacent attacker to circumvent existing authentication controls and run arbitrary commands on the underlying host if certain preconditions outside of the attacker's control are met. Successful exploitation of this vulnerability could allow an attacker to execute arbitrary commands on the underlying operating system.	Arubaos
CVE-2026-95710	Oct 22, 2026	HPE CVE-2026-95710: Vulnerability in unknown component An unauthenticated buffer overflow vulnerability exists in the underlying operating system of AOS-10 or AOS-8 and could allow an unauthenticated adjacent attacker to conduct a denial of service attack. Successful exploitation could allow an attacker to disrupt the availability of the affected system, with a limited impact to the integrity of the affected component.	Arubaos
CVE-2026-95709	Oct 22, 2026	HPE Unspecified Component Vulnerability Command injection vulnerabilities exist in the affected interface of AOS-10 that could allow an authenticated remote attacker with high privileges to perform command injection. Successful exploitation could allow an attacker to execute arbitrary commands as a privileged user on the underlying operating system.	Arubaos
CVE-2026-95708	Oct 22, 2026	CVE-2026-95708: Potential Vulnerability in HPE Component Command injection vulnerabilities exist in the affected interface of AOS-10 that could allow an authenticated remote attacker with high privileges to perform command injection. Successful exploitation could allow an attacker to execute arbitrary commands as a privileged user on the underlying operating system.	Arubaos
CVE-2026-95707	Oct 22, 2026	HPE Unspecified Vulnerability A buffer overflow vulnerability in the PAPI protocol of AOS-8 could allow an authenticated remote attacker with high privileges to achieve remote code execution. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system.	Arubaos
CVE-2026-95706	Oct 22, 2026	Security vulnerability in HPE product Command injection vulnerabilities in the affected interface of AOS-8 could allow an authenticated remote attacker with high privileges to perform command injection. Successful exploitation could allow an attacker to execute commands with the privileges of the impacted mechanism on the underlying operating system.	Arubaos
CVE-2026-95705	Oct 22, 2026	HPE CVE-2026-95705: Unspecified Vulnerability Command injection vulnerabilities in the affected interface of AOS-8 could allow an authenticated remote attacker with high privileges to perform command injection. Successful exploitation could allow an attacker to execute commands with the privileges of the impacted mechanism on the underlying operating system.	Arubaos
CVE-2026-95704	Oct 22, 2026	HPE product vulnerability: unspecified A vulnerability in the web-based management interface of wireless network management systems could allow an authenticated remote attacker to execute remote code. Successful exploitation could enable an attacker to execute arbitrary commands on the underlying operating system, potentially compromising system integrity and data security.	Arubaos
CVE-2026-79956	Oct 22, 2026	Unknown vulnerability in HPE product A vulnerability in the CLI command handling of the AOS-8 web interface could allow an authenticated remote attacker to execute arbitrary commands on the underlying operating system. Successful exploitation could allow an attacker to run unauthorized commands on the system, potentially leading to system compromise.	Arubaos
CVE-2026-79955	Oct 22, 2026	Unknown Vulnerability Assigned by HPE (CVE-2026-79955) An unauthenticated memory corruption vulnerability exists in a service accessed via the PAPI protocol in AOS-8 that could allow an unauthenticated remote attacker to conduct a denial of service attack. Successful exploitation could allow an attacker to disrupt the availability of the affected service.	Arubaos
CVE-2026-79895	Oct 22, 2026	CVE-2026-79895: HPE Product Vulnerability Vulnerabilities in the affected interface of AOS-10 could allow an unauthenticated remote attacker to conduct a denial of service attack. Successful exploitation could allow an attacker to disrupt the availability of the affected interface.	Arubaos
CVE-2026-79894	Oct 22, 2026	HPE Vulnerability: Unspecified Issue (CVE-2026-79894) An unauthenticated Denial-of-Service (DoS) vulnerability exists in the PAPI protocol of AOS-8. Successful exploitation of this vulnerability results in the ability to disrupt the availability of the affected interface.	Arubaos
CVE-2026-79893	Oct 22, 2026	HPE Unspecified Vulnerability Memory corruption vulnerabilities in AOS-10 could allow an unauthenticated remote attacker to conduct a denial of service attack. Successful exploitation could allow an attacker to disrupt the availability of the affected service.	Arubaos
CVE-2026-79892	Oct 22, 2026	CVE-2026-79892: Unspecified HPE Vulnerability A memory corruption vulnerability exists in AOS-8 that could allow an authenticated local attacker to execute arbitrary code. Successful exploitation could allow the attacker to execute arbitrary code as a privileged user on the underlying operating system.	Arubaos
CVE-2026-79891	Oct 22, 2026	HPE CVE-2026-79891 Unspecified Security Flaw A buffer overflow vulnerability exists in the command line interface of AOS-8 that could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system leading to complete system compromise.	Arubaos
CVE-2026-79890	Oct 22, 2026	HPE Vulnerability: Unspecified There are command injection vulnerabilities in AOS-8 that could lead to unauthenticated remote code execution by sending specially crafted PAPI packets. Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system.	Arubaos
CVE-2026-79889	Oct 22, 2026	HPE Product Vulnerability: Unspecified Issue Vulnerabilities in multiple web interface endpoints of AOS-8 devices could allow an unauthenticated remote attacker to trigger a buffer overflow by using specially crafted requests. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system, leading to complete system compromise.	Arubaos
CVE-2026-79888	Oct 22, 2026	HPE Vulnerability: Unspecified Security Flaw A vulnerability in a certain web interface endpoint of AOS-8 devices could allow an unauthenticated remote attacker to trigger a buffer overflow. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system, leading to complete system compromise.	Arubaos
CVE-2026-79887	Oct 22, 2026	Unknown vulnerability in HPE product A vulnerability in the web interface of AOS-8 could allow an unauthenticated remote attacker to achieve remote code execution. Successful exploitation could lead to complete device control, enabling interception of network traffic and potential compromise of connected systems.	Arubaos
CVE-2026-79886	Oct 22, 2026	HPE Vulnerability Flagged: Unknown Component An unauthenticated buffer overflow vulnerability exists in the PAPI protocol of AOS-8. Successful exploitation could allow an unauthenticated remote attacker to disrupt the availability of the affected service on the controller, with a limited impact to its integrity.	Arubaos
CVE-2026-79885	Oct 22, 2026	CVE-2026-79885 HPE Vulnerability An unauthenticated file write vulnerability exists in the PAPI protocol in AOS-8. Successful exploitation could allow an unauthenticated remote attacker to make limited modifications to files on the affected system and to disrupt the availability of the affected service.	Arubaos
CVE-2026-79884	Oct 22, 2026	HPE CVE-2026-79884: Unspecified Vulnerability A vulnerability in the web-based management interface of AOS-8 could allow an unauthenticated adjacent attacker to bypass existing authentication controls and access sensitive information. Successful exploitation could allow an attacker to gain access to some data in a cleartext format possibly exposing other network infrastructure to further compromise.	Arubaos
CVE-2026-79883	Oct 22, 2026	Unspecified vulnerability in HPE hardware A buffer overflow vulnerability in the PAPI protocol of HPE Networking AOS-10 could allow an unauthenticated adjacent attacker to access sensitive information. Successful exploitation could allow an attacker to retrieve information which could be used to potentially gain further access to network services supported by AOS-10, and to interrupt the normal operation of the affected service.	Arubaos
CVE-2026-79882	Oct 22, 2026	HPE Unspecified Security Vulnerability CVE-2026-79882 There is a command injection vulnerability in the PAPI protocol of AOS-10 that could lead to unauthenticated remote code execution by an adjacent attacker sending specially crafted packets. Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system.	Arubaos
CVE-2026-79881	Oct 22, 2026	CVE-2026-79881: HPE Vulnerability An authentication bypass vulnerability in the underlying operating system of AOS-8 could allow an unauthenticated remote attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system leading to complete system compromise.	Arubaos
CVE-2026-79880	Oct 22, 2026	CVE-2026-79880: HPE Vulnerability A vulnerability in the command line interface of AOS-8 could allow an authenticated remote attacker with high privileges to conduct a server-side request forgery (SSRF) attack. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.	Arubaos
CVE-2026-79879	Oct 22, 2026	CVE-2026-79879: HPE Vulnerability Impact Unknown Memory corruption vulnerabilities in the affected interface of AOS-10 could lead to remote code execution by an unauthenticated adjacent attacker. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system.	Arubaos
CVE-2026-79878	Oct 22, 2026	HPE Product Vulnerability: Potential RCE A command injection vulnerability in the AOS-8 command line interface accessed by the PAPI protocol could lead to unauthenticated remote code execution by an adjacent attacker sending specially crafted PAPI packets destined to the PAPI UDP port 8211. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system.	Arubaos
CVE-2026-79877	Oct 22, 2026	HPE Vulnerability CVE-2026-79877 A remote code execution vulnerability in the underlying operating system of AOS-10 could allow an unauthenticated adjacent attacker to execute arbitrary code on an affected device. Successful exploitation could allow an attacker to execute arbitrary commands as a privileged user on the underlying operating system leading to complete system compromise.	Arubaos
CVE-2026-79876	Oct 22, 2026	Unspecified Security Flaw in HPE Device, Component: Unknown A sensitive information disclosure vulnerability in the Wi-Fi frame processing of AOS-10 could allow an unauthenticated adjacent attacker to access sensitive information. Successful exploitation could allow an attacker to retrieve information which could be used to potentially gain further access to network services supported by AOS-10, or to interrupt the normal operation of the affected service.	Arubaos
CVE-2026-79875	Oct 22, 2026	Unknown vulnerability in HPE product A vulnerability has been identified in the PAPI protocol of AOS-8 that could potentially allow an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative access, modify system configurations, and access or manipulate sensitive data.	Arubaos
CVE-2026-79874	Oct 22, 2026	CVE-2026-79874 HPE Security Flaw An authentication bypass in the API of AOS-10 allows an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative access, modify system configurations, and access or manipulate sensitive data.	Arubaos
CVE-2026-79873	Oct 22, 2026	HPE Hardware Vulnerability 2026-79873 Authentication bypass vulnerabilities in the PAPI protocol of AOS-10 could allow an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative access, modify system configurations, and access or manipulate sensitive data on affected devices.	Arubaos
CVE-2026-79872	Oct 22, 2026	CVE-2026-79872: HPE Security Vulnerability A buffer overflow vulnerability exists in the underlying operating system of AOS that could lead to unauthenticated remote code execution by an unauthenticated remote attacker. Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system.	Arubaos
CVE-2026-79871	Oct 22, 2026	HPE CVE-2026-79871: Unspecified Vulnerability A sensitive information disclosure vulnerability in the command line interface of AOS-10 could allow an unauthenticated remote attacker to access sensitive information. Successful exploitation could allow an attacker to retrieve information which could be used to potentially gain further access to network services supported by AOS-10.	Arubaos
CVE-2026-79870	Oct 22, 2026	CVE-2026-79870: HPE Product Vulnerability An authentication bypass vulnerability in the PAPI protocol of AOS-8 could allow an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative access, modify system configurations, access or manipulate sensitive data, and disrupt network operations.	Arubaos
CVE-2026-79869	Oct 22, 2026	Unknown HPE component vulnerability (CVE-2026-79869) Authentication bypass vulnerabilities in the affected interface of AOS-10 could allow an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to execute arbitrary commands as a privileged user on the underlying operating system.	Arubaos
CVE-2026-79868	Oct 22, 2026	Potential Remote Exploit in HPE System Authentication bypass vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative access, modify system configurations, and access or manipulate sensitive data, leading to complete compromise of the affected system.	Arubaos
CVE-2026-79867	Oct 22, 2026	CVE-2026-79867: Unspecified HPE Vulnerability Authentication bypass vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated adjacent attacker to circumvent existing authentication controls and run arbitrary commands on the underlying host. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system leading to complete system compromise.	Arubaos
CVE-2026-79866	Oct 22, 2026	CVE-2026-79866: HPE Potential Vulnerability An unauthenticated path traversal vulnerability exists in the PAPI protocol in AOS-8. Successful exploitation of this vulnerability could allow an unauthenticated adjacent attacker to read, modify, and delete files on the underlying operating system.	Arubaos