LIVE · cybersecurity feed
Live wire
ASOS Breach Reveals the Risks in Customer-Facing SaaSUnpatched AhsayCBS flaws exploited to deploy webshells, mine cryptoAI Training Critical as Governance Challenges GrowUS Disrupts Chinese State-Sponsored Hacking ToolsCitrix warns admins to patch new NetScaler RCE flaw immediatelyCisco Patches a Dozen Critical VulnerabilitiesCisco warns of critical flaws allowing Nexus switch takeoverCVE-2026-21589 · Exploitation attempts against critical Atlassian flaw have begun (CVE-2026-21589)Cyber experts call on CISA to create mandatory federal OT rulesGremlin Foresight AI finds system weaknesses and verifies the fixes
vendor

Hpe

21 CVEs published in the last four months and 2 stories. Exploited flaws first.

Critical1
High20
Medium0
Exploited (KEV)0

All recent CVEs

CVECVSSSeverityProductSummaryPublished
CVE-2026-737499.8criticalarubaos-cxMultiple vulnerabilities exist in a daemon of AOS-CX that may allow for improper processing of malformed input.53d ago
CVE-2026-448808.8higharubaos-cxA buffer overflow vulnerability was found in the command line interface of AOS-CX.95d ago
CVE-2026-737528.8higharubaos-cxAn unauthenticated arbitrary file write vulnerability exists in an API endpoint of AOS-CX.53d ago
CVE-2026-737828.8higharubaos-cxA format string vulnerability exists in the command line interface of AOS-CX that could lead to unauthenticated re53d ago
CVE-2026-737818.4higharubaos-cxA vulnerability in the web-based management interface of AOS-CX could allow an authenticated remote attacker to co53d ago
CVE-2026-737808.3higharubaos-cxA vulnerability in the web-based management interface of AOS-CX switches exposes some sessions to a lack of Cross-53d ago
CVE-2026-737798.2higharubaos-cxVulnerabilities have been identified in the operating system of AOS-CX switches that could potentially allow an un53d ago
CVE-2026-737778.1higharubaos-cxVulnerabilities have been identified in the API endpoint of AOS-CX switches that could potentially allow an unauth53d ago
CVE-2026-737767.9higharubaos-cxA signature verification bypass vulnerability exists in the command line interface of AOS-CX.53d ago
CVE-2026-737757.7higharubaos-cxVulnerabilities in the API endpoint of AOS-CX could allow a remote attacker authenticated with low privileges to a53d ago
CVE-2026-737747.6higharubaos-cxA buffer overflow vulnerability exists in the underlying operating system of AOS-CX that could lead to unauthentic53d ago
CVE-2026-737737.5higharubaos-cxAn unauthenticated Denial-of-Service (DoS) vulnerability exists in the API endpoint of AOS-CX.53d ago
CVE-2026-737717.5higharubaos-cxAn authentication vulnerability exists in the AOS-CX management interface and API that may allow improper authenti53d ago
CVE-2026-737707.3higharubaos-cxAn authenticated arbitrary file write vulnerability exists in AOS-CX.53d ago
CVE-2026-737687.3higharubaos-cxA vulnerability exists in the command line interface of AOS-CX that may allow for improper processing of malformed53d ago
CVE-2026-737667.2higharubaos-cxCommand injection vulnerabilities in the API endpoint of AOS-CX could allow an authenticated remote attacker with 53d ago
CVE-2026-737657.2higharubaos-cxAuthenticated path traversal vulnerabilities exist in API endpoints of AOS-CX.53d ago
CVE-2026-634547.2higharubaos-cxAn authenticated path traversal vulnerability exists in AOS-CX.95d ago
CVE-2026-634537.2higharubaos-cxBuffer overflow vulnerabilities exist in the command line interface of AOS-CX.95d ago
CVE-2026-737677.2higharubaos-cxAuthenticated command injection vulnerabilities exist in the command line interface of AOS-CX.53d ago
CVE-2026-737647.1higharubaos-cxVulnerabilities have been identified in the operating system of AOS-CX switches that could potentially allow an un53d ago

Filter the full tracker by Hpe →

Our coverage of Hpe

CVE-2026-73749critical

HPE Patches Critical RCE Vulnerabilities in AOS-CX

Hewlett Packard Enterprise (HPE) has issued security updates to mitigate critical remote code execution (RCE) vulnerabilities identified in its ArubaOS-CX operating system. These vulnerabilities, which have been assigned the identifier CVE-2026-73749, pose a significant risk, as reflected by their CVSS score of 9.8.

vulnerabilitycritical

HPE patches critical ArubaOS-CX remote code execution flaw

Hewlett Packard Enterprise (HPE) has released patches for a critical remote code execution vulnerability, identified as CVE-2026-73749, affecting its ArubaOS-CX network operating system. This buffer overflow flaw allows unauthenticated attackers to achieve elevated privileges and execute code by sending specially crafted packets to a vulnerable daemon process.