Patchfirst: Hewlett Packard Enterprise vulnerabilitieshttps://patchfirst.co/vendor/hpe/New and newly exploited Hewlett Packard Enterprise CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.en-gb360Sat, 31 Oct 2026 05:11:25 GMTCVE-2026-79861: There is a command injection vulnerability in AOS-10 that could lead to unauthenticated remote code execution by…https://patchfirst.co/cve/CVE-2026-79861/CVE-2026-79861Thu, 22 Oct 2026 00:00:00 GMTHewlett Packard Enterprise (HPE) · ArubaOS (AOS). Not in CISA KEV. EPSS 1.6% (higher than 75.1% of CVEs). CVSS 9.8 CRITICAL. Priority 23.8 of 100.CVE-2026-79857: There is a command injection vulnerability in the PAPI protocol (Aruba's access point management protocol) of AOS-8…https://patchfirst.co/cve/CVE-2026-79857/CVE-2026-79857Thu, 22 Oct 2026 00:00:00 GMTHewlett Packard Enterprise (HPE) · ArubaOS (AOS). Not in CISA KEV. EPSS 1.4% (higher than 72.7% of CVEs). CVSS 9.8 CRITICAL. Priority 23.3 of 100.CVE-2026-79846: Command injection vulnerabilities exist in the affected interface of AOS-8 that could allow an unauthenticated remote…https://patchfirst.co/cve/CVE-2026-79846/CVE-2026-79846Thu, 22 Oct 2026 00:00:00 GMTHewlett Packard Enterprise (HPE) · ArubaOS (AOS). Not in CISA KEV. EPSS 1.4% (higher than 71.9% of CVEs). CVSS 10.0 CRITICAL. Priority 23.3 of 100.CVE-2026-79864: Command injection vulnerabilities exist in the affected interface of AOS-10 that could allow an unauthenticated…https://patchfirst.co/cve/CVE-2026-79864/CVE-2026-79864Thu, 22 Oct 2026 00:00:00 GMTHewlett Packard Enterprise (HPE) · ArubaOS (AOS). Not in CISA KEV. EPSS 1.2% (higher than 67.2% of CVEs). CVSS 9.6 CRITICAL. Priority 22.1 of 100.CVE-2026-79847: Buffer overflow vulnerabilities in the affected interface of AOS-10 could lead to unauthenticated remote code…https://patchfirst.co/cve/CVE-2026-79847/CVE-2026-79847Thu, 22 Oct 2026 00:00:00 GMTHewlett Packard Enterprise (HPE) · ArubaOS (AOS). Not in CISA KEV. EPSS 0.8% (higher than 57.1% of CVEs). CVSS 10.0 CRITICAL. Priority 20.3 of 100.CVE-2026-79851: Buffer overflow vulnerabilities exist in the affected interface of AOS-10 that could lead to unauthenticated remote…https://patchfirst.co/cve/CVE-2026-79851/CVE-2026-79851Thu, 22 Oct 2026 00:00:00 GMTHewlett Packard Enterprise (HPE) · ArubaOS (AOS). Not in CISA KEV. EPSS 0.8% (higher than 55.3% of CVEs). CVSS 10.0 CRITICAL. Priority 20.0 of 100.CVE-2026-79855: An authentication bypass vulnerability in the SSH daemon of AOS-8 allows an unauthenticated remote attacker to…https://patchfirst.co/cve/CVE-2026-79855/CVE-2026-79855Thu, 22 Oct 2026 00:00:00 GMTHewlett Packard Enterprise (HPE) · ArubaOS (AOS). Not in CISA KEV. EPSS 0.8% (higher than 55% of CVEs). CVSS 9.8 CRITICAL. Priority 19.8 of 100.CVE-2026-79860: Buffer overflow vulnerabilities exist in an underlying service of AOS-8 that could lead to unauthenticated remote code…https://patchfirst.co/cve/CVE-2026-79860/CVE-2026-79860Thu, 22 Oct 2026 00:00:00 GMTHewlett Packard Enterprise (HPE) · ArubaOS (AOS). Not in CISA KEV. EPSS 0.7% (higher than 54.7% of CVEs). CVSS 9.8 CRITICAL. Priority 19.7 of 100.CVE-2026-79849: Vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated remote attacker to conduct SQL…https://patchfirst.co/cve/CVE-2026-79849/CVE-2026-79849Thu, 22 Oct 2026 00:00:00 GMTHewlett Packard Enterprise (HPE) · ArubaOS (AOS). Not in CISA KEV. EPSS 0.7% (higher than 53.3% of CVEs). CVSS 10.0 CRITICAL. Priority 19.6 of 100.CVE-2026-79848: Vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated remote attacker to conduct SQL…https://patchfirst.co/cve/CVE-2026-79848/CVE-2026-79848Thu, 22 Oct 2026 00:00:00 GMTHewlett Packard Enterprise (HPE) · ArubaOS (AOS). Not in CISA KEV. EPSS 0.7% (higher than 53.3% of CVEs). CVSS 10.0 CRITICAL. Priority 19.6 of 100.CVE-2026-79850: Vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated remote attacker to bypass existing…https://patchfirst.co/cve/CVE-2026-79850/CVE-2026-79850Thu, 22 Oct 2026 00:00:00 GMTHewlett Packard Enterprise (HPE) · ArubaOS (AOS). Not in CISA KEV. EPSS 0.7% (higher than 52.7% of CVEs). CVSS 10.0 CRITICAL. Priority 19.5 of 100.CVE-2026-79844: Authentication bypass vulnerabilities in the affected interface of AOS-10 could allow an unauthenticated remote…https://patchfirst.co/cve/CVE-2026-79844/CVE-2026-79844Thu, 22 Oct 2026 00:00:00 GMTHewlett Packard Enterprise (HPE) · ArubaOS (AOS). Not in CISA KEV. EPSS 0.7% (higher than 52.7% of CVEs). CVSS 10.0 CRITICAL. Priority 19.5 of 100.CVE-2026-79859: Buffer overflow vulnerabilities exist in the affected interface of AOS-8 that could lead to unauthenticated remote…https://patchfirst.co/cve/CVE-2026-79859/CVE-2026-79859Thu, 22 Oct 2026 00:00:00 GMTHewlett Packard Enterprise (HPE) · ArubaOS (AOS). Not in CISA KEV. EPSS 0.7% (higher than 52.9% of CVEs). CVSS 9.8 CRITICAL. Priority 19.4 of 100.CVE-2026-79853: Sensitive information disclosure vulnerabilities in the affected interface of AOS-10 could allow an unauthenticated…https://patchfirst.co/cve/CVE-2026-79853/CVE-2026-79853Thu, 22 Oct 2026 00:00:00 GMTHewlett Packard Enterprise (HPE) · ArubaOS (AOS). Not in CISA KEV. EPSS 0.7% (higher than 53% of CVEs). CVSS 9.8 CRITICAL. Priority 19.4 of 100.CVE-2026-79854: A vulnerability in the affected interface of AOS-10 could allow an unauthenticated remote attacker to conduct SQL…https://patchfirst.co/cve/CVE-2026-79854/CVE-2026-79854Thu, 22 Oct 2026 00:00:00 GMTHewlett Packard Enterprise (HPE) · ArubaOS (AOS). Not in CISA KEV. EPSS 0.6% (higher than 50.7% of CVEs). CVSS 9.8 CRITICAL. Priority 18.9 of 100.CVE-2026-79852: A vulnerability in the web-based management interface of AOS could allow an unauthenticated remote attacker to conduct…https://patchfirst.co/cve/CVE-2026-79852/CVE-2026-79852Thu, 22 Oct 2026 00:00:00 GMTHewlett Packard Enterprise (HPE) · ArubaOS (AOS). Not in CISA KEV. EPSS 0.6% (higher than 50.7% of CVEs). CVSS 9.8 CRITICAL. Priority 18.9 of 100.CVE-2026-79856: A buffer overflow vulnerability exists in the PAPI protocol of AOS-8 that could allow an unauthenticated remote…https://patchfirst.co/cve/CVE-2026-79856/CVE-2026-79856Thu, 22 Oct 2026 00:00:00 GMTHewlett Packard Enterprise (HPE) · ArubaOS (AOS). Not in CISA KEV. EPSS 0.6% (higher than 49.2% of CVEs). CVSS 9.8 CRITICAL. Priority 18.6 of 100.CVE-2026-79872: A buffer overflow vulnerability exists in the underlying operating system of AOS that could lead to unauthenticated…https://patchfirst.co/cve/CVE-2026-79872/CVE-2026-79872Thu, 22 Oct 2026 00:00:00 GMTHewlett Packard Enterprise (HPE) · ArubaOS (AOS). Not in CISA KEV. EPSS 0.6% (higher than 46.3% of CVEs). CVSS 9.4 CRITICAL. Priority 17.8 of 100.CVE-2026-79858: An unauthenticated SQL injection vulnerability exists in the PAPI protocol in AOS-8https://patchfirst.co/cve/CVE-2026-79858/CVE-2026-79858Thu, 22 Oct 2026 00:00:00 GMTHewlett Packard Enterprise (HPE) · ArubaOS (AOS). Not in CISA KEV. EPSS 0.5% (higher than 43.5% of CVEs). CVSS 9.8 CRITICAL. Priority 17.5 of 100.CVE-2026-79865: A memory corruption vulnerability in the affected interface of AOS-10 could allow an unauthenticated adjacent attacker…https://patchfirst.co/cve/CVE-2026-79865/CVE-2026-79865Thu, 22 Oct 2026 00:00:00 GMTHewlett Packard Enterprise (HPE) · ArubaOS (AOS). Not in CISA KEV. EPSS 0.4% (higher than 28.7% of CVEs). CVSS 9.6 CRITICAL. Priority 14.4 of 100.CVE-2026-79871: A sensitive information disclosure vulnerability in the command line interface of AOS-10 could allow an…https://patchfirst.co/cve/CVE-2026-79871/CVE-2026-79871Thu, 22 Oct 2026 00:00:00 GMTHewlett Packard Enterprise (HPE) · ArubaOS (AOS). Not in CISA KEV. EPSS 0.3% (higher than 24.3% of CVEs). CVSS 9.6 CRITICAL. Priority 13.5 of 100.CVE-2026-79869: Authentication bypass vulnerabilities in the affected interface of AOS-10 could allow an unauthenticated adjacent…https://patchfirst.co/cve/CVE-2026-79869/CVE-2026-79869Thu, 22 Oct 2026 00:00:00 GMTHewlett Packard Enterprise (HPE) · ArubaOS (AOS). Not in CISA KEV. EPSS 0.3% (higher than 22% of CVEs). CVSS 9.6 CRITICAL. Priority 13.0 of 100.CVE-2026-79867: Authentication bypass vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated adjacent…https://patchfirst.co/cve/CVE-2026-79867/CVE-2026-79867Thu, 22 Oct 2026 00:00:00 GMTHewlett Packard Enterprise (HPE) · ArubaOS (AOS). Not in CISA KEV. EPSS 0.3% (higher than 22% of CVEs). CVSS 9.6 CRITICAL. Priority 13.0 of 100.CVE-2026-79870: An authentication bypass vulnerability in the PAPI protocol of AOS-8 could allow an unauthenticated adjacent attacker…https://patchfirst.co/cve/CVE-2026-79870/CVE-2026-79870Thu, 22 Oct 2026 00:00:00 GMTHewlett Packard Enterprise (HPE) · ArubaOS (AOS). Not in CISA KEV. EPSS 0.3% (higher than 19.2% of CVEs). CVSS 9.6 CRITICAL. Priority 12.5 of 100.CVE-2026-79868: Authentication bypass vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated adjacent…https://patchfirst.co/cve/CVE-2026-79868/CVE-2026-79868Thu, 22 Oct 2026 00:00:00 GMTHewlett Packard Enterprise (HPE) · ArubaOS (AOS). Not in CISA KEV. EPSS 0.3% (higher than 19.2% of CVEs). CVSS 9.6 CRITICAL. Priority 12.5 of 100.CVE-2026-79863: Buffer overflow vulnerabilities in the affected interface of AOS-10 or AOS-8 could allow an unauthenticated adjacent…https://patchfirst.co/cve/CVE-2026-79863/CVE-2026-79863Thu, 22 Oct 2026 00:00:00 GMTHewlett Packard Enterprise (HPE) · ArubaOS (AOS). Not in CISA KEV. EPSS 0.3% (higher than 17.9% of CVEs). CVSS 9.6 CRITICAL. Priority 12.2 of 100.CVE-2026-79862: Buffer overflow vulnerabilities in the affected interface of AOS-10 or AOS-8 could allow an unauthenticated adjacent…https://patchfirst.co/cve/CVE-2026-79862/CVE-2026-79862Thu, 22 Oct 2026 00:00:00 GMTHewlett Packard Enterprise (HPE) · ArubaOS (AOS). Not in CISA KEV. EPSS 0.3% (higher than 17.9% of CVEs). CVSS 9.6 CRITICAL. Priority 12.2 of 100.CVE-2026-79866: An unauthenticated path traversal vulnerability exists in the PAPI protocol in AOS-8https://patchfirst.co/cve/CVE-2026-79866/CVE-2026-79866Thu, 22 Oct 2026 00:00:00 GMTHewlett Packard Enterprise (HPE) · ArubaOS (AOS). Not in CISA KEV. EPSS 0.2% (higher than 15.4% of CVEs). CVSS 9.6 CRITICAL. Priority 11.7 of 100.CVE-2026-79874: An authentication bypass in the API of AOS-10 allows an unauthenticated adjacent attacker to circumvent existing…https://patchfirst.co/cve/CVE-2026-79874/CVE-2026-79874Thu, 22 Oct 2026 00:00:00 GMTHewlett Packard Enterprise (HPE) · ArubaOS (AOS). Not in CISA KEV. EPSS 0.2% (higher than 15.6% of CVEs). CVSS 9.3 CRITICAL. Priority 11.6 of 100.CVE-2026-79873: Authentication bypass vulnerabilities in the PAPI protocol of AOS-10 could allow an unauthenticated adjacent attacker…https://patchfirst.co/cve/CVE-2026-79873/CVE-2026-79873Thu, 22 Oct 2026 00:00:00 GMTHewlett Packard Enterprise (HPE) · ArubaOS (AOS). Not in CISA KEV. EPSS 0.2% (higher than 15.6% of CVEs). CVSS 9.3 CRITICAL. Priority 11.6 of 100.CVE-2026-79876: A sensitive information disclosure vulnerability in the Wi-Fi frame processing of AOS-10 could allow an…https://patchfirst.co/cve/CVE-2026-79876/CVE-2026-79876Thu, 22 Oct 2026 00:00:00 GMTHewlett Packard Enterprise (HPE) · ArubaOS (AOS). Not in CISA KEV. EPSS 0.2% (higher than 14.1% of CVEs). CVSS 9.3 CRITICAL. Priority 11.2 of 100.CVE-2026-79875: A vulnerability has been identified in the PAPI protocol of AOS-8 that could potentially allow an unauthenticated…https://patchfirst.co/cve/CVE-2026-79875/CVE-2026-79875Thu, 22 Oct 2026 00:00:00 GMTHewlett Packard Enterprise (HPE) · ArubaOS (AOS). Not in CISA KEV. EPSS 0.2% (higher than 13.9% of CVEs). CVSS 9.3 CRITICAL. Priority 11.2 of 100.CVE-2026-79842: An authentication bypass vulnerability exists in HPE Intelligent Management Center (iMC) prior to v7.3 E0713https://patchfirst.co/cve/CVE-2026-79842/CVE-2026-79842Thu, 08 Oct 2026 00:00:00 GMTHewlett Packard Enterprise · HPE Intelligent Management Center (iMC). Not in CISA KEV. EPSS 0.3% (higher than 26% of CVEs). CVSS 9.1 CRITICAL. Priority 14.1 of 100.CVE-2026-76742: Authentication bypass vulnerabilities exist in the web management interface of AOS-Shttps://patchfirst.co/cve/CVE-2026-76742/CVE-2026-76742Tue, 06 Oct 2026 00:00:00 GMTHewlett Packard Enterprise (HPE) · AOS-Switch (AOS-S). Not in CISA KEV. EPSS 0.6% (higher than 48% of CVEs). CVSS 9.8 CRITICAL. Priority 18.6 of 100.CVE-2026-76743: A vulnerability have been identified in the management interface of AOS-S that could potentially allow an…https://patchfirst.co/cve/CVE-2026-76743/CVE-2026-76743Tue, 06 Oct 2026 00:00:00 GMTHewlett Packard Enterprise (HPE) · AOS-Switch (AOS-S). Not in CISA KEV. EPSS 0.5% (higher than 45.9% of CVEs). CVSS 9.8 CRITICAL. Priority 18.2 of 100.CVE-2026-76750: Deserialization of untrusted data vulnerabilities exist in the web interface of HPE Networking ClearPass Policy Managerhttps://patchfirst.co/cve/CVE-2026-76750/CVE-2026-76750Tue, 06 Oct 2026 00:00:00 GMTHewlett Packard Enterprise (HPE) · ClearPass Policy Manager (CPPM). Not in CISA KEV. EPSS 0.5% (higher than 45.3% of CVEs). CVSS 9.8 CRITICAL. Priority 18.1 of 100.CVE-2026-76753: A format string vulnerability in an affected service interface of HPE Networking ClearPass Policy Manager could allow…https://patchfirst.co/cve/CVE-2026-76753/CVE-2026-76753Tue, 06 Oct 2026 00:00:00 GMTHewlett Packard Enterprise (HPE) · ClearPass Policy Manager (CPPM). Not in CISA KEV. EPSS 0.5% (higher than 44.6% of CVEs). CVSS 9.8 CRITICAL. Priority 17.9 of 100.CVE-2026-76744: Buffer overflow vulnerabilities exist in the affected interface of AOS-Shttps://patchfirst.co/cve/CVE-2026-76744/CVE-2026-76744Tue, 06 Oct 2026 00:00:00 GMTHewlett Packard Enterprise (HPE) · AOS-Switch (AOS-S). Not in CISA KEV. EPSS 0.5% (higher than 43.5% of CVEs). CVSS 9.8 CRITICAL. Priority 17.7 of 100.CVE-2026-76752: Authentication bypass vulnerabilities exist in the web-based management and API interfaces of HPE Networking ClearPass…https://patchfirst.co/cve/CVE-2026-76752/CVE-2026-76752Tue, 06 Oct 2026 00:00:00 GMTHewlett Packard Enterprise (HPE) · ClearPass Policy Manager (CPPM). Not in CISA KEV. EPSS 0.5% (higher than 40.7% of CVEs). CVSS 9.8 CRITICAL. Priority 17.2 of 100.CVE-2026-79796: Vulnerabilities have been identified in the affected interface of ClearPass Policy Manager that could potentially…https://patchfirst.co/cve/CVE-2026-79796/CVE-2026-79796Tue, 06 Oct 2026 00:00:00 GMTHewlett Packard Enterprise (HPE) · ClearPass Policy Manager (CPPM). Not in CISA KEV. EPSS 0.5% (higher than 40.4% of CVEs). CVSS 9.8 CRITICAL. Priority 17.1 of 100.CVE-2026-79805: An authenticated path traversal vulnerability exists in ClearPass Policy Managerhttps://patchfirst.co/cve/CVE-2026-79805/CVE-2026-79805Tue, 06 Oct 2026 00:00:00 GMTHewlett Packard Enterprise (HPE) · ClearPass Policy Manager (CPPM). Not in CISA KEV. EPSS 0.4% (higher than 37.4% of CVEs). CVSS 9.8 CRITICAL. Priority 16.5 of 100.CVE-2026-76747: Buffer overflow vulnerabilities exist in the affected interface of AOS-Shttps://patchfirst.co/cve/CVE-2026-76747/CVE-2026-76747Tue, 06 Oct 2026 00:00:00 GMTHewlett Packard Enterprise (HPE) · AOS-Switch (AOS-S). Not in CISA KEV. EPSS 0.4% (higher than 39% of CVEs). CVSS 9.1 CRITICAL. Priority 16.3 of 100.CVE-2026-76754: A vulnerability in an affected interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to…https://patchfirst.co/cve/CVE-2026-76754/CVE-2026-76754Tue, 06 Oct 2026 00:00:00 GMTHewlett Packard Enterprise (HPE) · ClearPass Policy Manager (CPPM). Not in CISA KEV. EPSS 0.4% (higher than 32.5% of CVEs). CVSS 9.8 CRITICAL. Priority 15.5 of 100.CVE-2026-79798: SQL injection vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow a…https://patchfirst.co/cve/CVE-2026-79798/CVE-2026-79798Tue, 06 Oct 2026 00:00:00 GMTHewlett Packard Enterprise (HPE) · ClearPass Policy Manager (CPPM). Not in CISA KEV. EPSS 0.3% (higher than 27.8% of CVEs). CVSS 9.9 CRITICAL. Priority 14.7 of 100.CVE-2026-79801: A missing integrity verification vulnerability in the client agent software of HPE Networking ClearPass Policy Manager…https://patchfirst.co/cve/CVE-2026-79801/CVE-2026-79801Tue, 06 Oct 2026 00:00:00 GMTHewlett Packard Enterprise (HPE) · ClearPass Policy Manager (CPPM). Not in CISA KEV. EPSS 0.3% (higher than 25.4% of CVEs). CVSS 9.8 CRITICAL. Priority 14.1 of 100.CVE-2026-76751: A missing integrity verification vulnerability exists in the OnGuard agent of ClearPass Policy Managerhttps://patchfirst.co/cve/CVE-2026-76751/CVE-2026-76751Tue, 06 Oct 2026 00:00:00 GMTHewlett Packard Enterprise (HPE) · ClearPass Policy Manager (CPPM). Not in CISA KEV. EPSS 0.3% (higher than 22.7% of CVEs). CVSS 9.8 CRITICAL. Priority 13.6 of 100.CVE-2026-79794: A SQL injection vulnerability in the web-based management interface of ClearPass Policy Manager could allow an…https://patchfirst.co/cve/CVE-2026-79794/CVE-2026-79794Tue, 06 Oct 2026 00:00:00 GMTHewlett Packard Enterprise (HPE) · ClearPass Policy Manager (CPPM). Not in CISA KEV. EPSS 0.3% (higher than 22.4% of CVEs). CVSS 9.1 CRITICAL. Priority 13.0 of 100.CVE-2026-76745: Memory corruption vulnerabilities exist in AOS-S that are reachable by an unauthenticated adjacent attackerhttps://patchfirst.co/cve/CVE-2026-76745/CVE-2026-76745Tue, 06 Oct 2026 00:00:00 GMTHewlett Packard Enterprise (HPE) · AOS-Switch (AOS-S). Not in CISA KEV. EPSS 0.2% (higher than 14.5% of CVEs). CVSS 9.6 CRITICAL. Priority 11.8 of 100.CVE-2026-76746: An unauthenticated buffer overflow vulnerability exists in AOS-Shttps://patchfirst.co/cve/CVE-2026-76746/CVE-2026-76746Tue, 06 Oct 2026 00:00:00 GMTHewlett Packard Enterprise (HPE) · AOS-Switch (AOS-S). Not in CISA KEV. EPSS 0.2% (higher than 9.8% of CVEs). CVSS 9.3 CRITICAL. Priority 10.6 of 100.[KEV] CVE-2025-37164: Hewlett Packard Enterprise (HPE) OneView Code Injection Vulnerabilityhttps://patchfirst.co/cve/CVE-2025-37164/CVE-2025-37164#kevWed, 07 Jan 2026 00:00:00 GMTHewlett Packard Enterprise (HPE) · OneView. In CISA KEV since 2026-01-07. ENISA EUVD lists it as exploited. EPSS 90.2% (higher than 99.8% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 74.8 of 100.kevpublic-exploitT1190T1059