HPE Patches Dozens of Critical Flaws in Networking Products
HPE last week released patches for 72 vulnerabilities in the AOS-8 and AOS-10 wireless operating systems of its Aruba networking products, including 33 critical-severity flaws.
The security updates address eight max-severity bugs: CVE-2026-79844, CVE-2026-79845, CVE-2026-79846, CVE-2026-79847, CVE-2026-79848, CVE-2026-79849, CVE-2026-79850, and CVE-2026-79851.
Successful exploitation of these security defects could allow unauthenticated attackers to achieve remote code execution (RCE), bypass authentication to gain administrative privileges, run arbitrary commands, and completely compromise the affected systems.
HPE Networking’s AOS versions 8.10.0.24, 8.13.3.1, 10.4.1.14, 10.7.2.7, and 10.8.1.2 contain fixes for all eight bugs and have been rolled out across mobility conductor, controller, gateway, and access point products.
The remaining critical-severity issues resolved with the updates could lead to unauthenticated RCE, command execution, information disclosure, authentication bypass, file tampering, administrative access, and complete system compromise, HPE notes in its advisory.
HPE also resolved 31 high-severity vulnerabilities across its networking products, including over a dozen that...
Copyright of this story solely belongs to www.securityweek.com. To see the full text click HERE
