poslední zpráva
SPOJENO AI EPSS 0.01 (nejvyšší)
HPE patches eight max severity RCE and auth bypass AOS flaws
Hewlett Packard Enterprise (HPE) released security updates to patch 72 vulnerabilities in the Aruba Operating System (ArubaOS), including eight maximum-severity authentication bypass and code execution issues. [...]
HPE Hewlett Packard Enterprise IT NL FI US FR
CVE v události 10
| CVE | hodnocení | KEV | EPSS |
|---|---|---|---|
| CVE-2026-79844 | 10.0 3.1 · hpe | – | 0.01 |
| CVE-2026-79845 | 7.3 3.1 · VulDB 7.3 3.0 · VulDB 6.9 4.0 · VulDB | – | 0.00 |
| CVE-2026-79846 | 10.0 3.1 · hpe | – | 0.01 |
| CVE-2026-79847 | 10.0 3.1 · hpe | – | 0.01 |
| CVE-2026-79848 | 10.0 3.1 · hpe | – | 0.01 |
| CVE-2026-79849 | 10.0 3.1 · hpe | – | 0.01 |
| CVE-2026-79850 | 10.0 3.1 · hpe | – | 0.01 |
| CVE-2026-79851 | 10.0 3.1 · hpe | – | 0.01 |
| CVE-2026-79857 | 9.8 3.1 · hpe | – | 0.01 |
| CVE-2026-79860 | 9.8 3.1 · hpe | – | 0.01 |
Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE. Advisory v textu uvádí CVSS 10.0.
Jak se o tom psalo 5
-
· CSIRT Itálie (ACN) IT
HPE: rilevate vulnerabilità in ArubaOS
Rilasciati aggiornamenti di sicurezza che sanano molteplici vulnerabilità, di cui 32 con gravità “critica” e 31 con gravità “alta”, in HPE Aruba Networking AOS-8 e AOS-10, sistemi operativi di rete per la gestione delle infrastrutture Wi-Fi aziendali.
-
· NCSC-NL NL
NCSC-2026-0454 [1.00] [M/H] Kwetsbaarheden verholpen in HPE Networking AOS
HPE heeft 72 kwetsbaarheden verholpen in HPE Networking AOS-8 en AOS-10, waaronder Mobility Conductors, Mobility Controllers, Mobility Gateways en Access Points. De kwetsbaarheden betreffen verschillende beveiligingsproblemen, waaronder authenticatieomzeiling, command- en SQL-injectie, buffer-overflows en onvoldoende toegangscontrole. Van de in totaal 72 kwetsbaarheden zijn 33 als kritiek aangemerkt. Hiervan kunnen 19 volgens HPE Networking zonder authenticatie op afstand via het netwerk worden…
-
· zachyceno · NCSC-FI FI
HPESBNW05162 rev.1 - Multiple Vulnerabilities in HPE Networking Wireless Operating Systems (AOS-10 & AOS-8)
Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 10.0, CVEs: CVE-2026-79844, CVE-2026-79845, CVE-2026-79846, CVE-2026-79847, CVE-2026-79848, CVE-2026-79849, CVE-2026-79850, CVE-2026-79851, CVE-2026-79852, CVE-2026-79853, CVE-2026-79854, CVE-2026-79855, CVE-2026-79856, CVE-2026-79857, CVE-2026-79858, CVE-2026-79859, CVE-2026-79860, CVE-2026-79861, CVE-2026-79862, CVE-2026-79863 (+52 other associated CVEs), Summary: Summary HPE Networking has released…
-
· BleepingComputer US nadpis události
HPE patches eight max severity RCE and auth bypass AOS flaws
Hewlett Packard Enterprise (HPE) released security updates to patch 72 vulnerabilities in the Aruba Operating System (ArubaOS), including eight maximum-severity authentication bypass and code execution issues. [...]
-
· zachyceno · CERT-FR – avis FR
Multiples vulnérabilités dans les produits HPE Aruba Networking (23 octobre 2026)
De multiples vulnérabilités ont été découvertes dans les produits HPE Aruba Networking. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un déni de service à distance.