As cited
Copy frozen at (site build).
vulnerabilities
NCSC-2026-0413 Vulnerabilities fixed in HPE Networking AOS-Switch
HPE Networking released patches for multiple critical vulnerabilities in HPE Networking AOS-Switch, including six flaws with CVSS scores between 9.0 and 9.8. The vulnerabilities span the management interface and application programming interface (API), enabling unauthenticated remote attackers to bypass authentication, execute arbitrary code, corrupt memory, leak sensitive information, or trigger denial of service. Successful exploitation could compromise the confidentiality, integrity, and availability of affected systems.
Why it matters: Organizations running HPE Networking AOS-Switch must patch immediately, as six high-severity flaws allow unauthenticated attackers to achieve remote code execution and full system compromise.
- Source published
- First seen by Cybersecurity Tracker