CYBERSECURITYTRACKER
Permanent story citation

NCSC-2026-0454 Vulnerabilities fixed in HPE Networking AOS

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 11354

As cited

Copy frozen at (site build).

vulnerabilities

NCSC-2026-0454 Vulnerabilities fixed in HPE Networking AOS

HPE has patched 72 vulnerabilities in HPE Networking AOS-8 and AOS-10 across Mobility Conductors, Controllers, Gateways, and Access Points, including 33 critical flaws. Eight of these critical vulnerabilities carry a CVSS score of 10.0 and can be exploited remotely without authentication to execute arbitrary code, gain administrative access, or cause denial of service. No public exploits or confirmed active exploitation have been reported as of this update.

Why it matters: Organizations running HPE Networking AOS devices face immediate risk from unauthenticated remote code execution vulnerabilities; patching the eight CVSS 10.0 flaws should be prioritized.

Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary