Hpe
Monthly
Denial of service with a limited information-disclosure component affects HPE networking devices, where an attacker positioned on an adjacent network segment can degrade availability severely (A:H) and potentially read a small amount of data (C:L) without authentication (PR:N) or user interaction (UI:N). The 7.1 severity is moderated in practice by the adjacency precondition (AV:A), which confines realistic exposure to insiders, on-path attackers, or hosts on an already-compromised Layer-2 segment rather than arbitrary internet clients. No CVE description was supplied and no public exploit code has been identified at time of analysis, so the specific vulnerable feature, protocol and affected models must be confirmed against HPE bulletin hpesbnw05162en_us.
Information disclosure in HPE networking products (CVSS 7.1) could let an unauthenticated attacker with adjacent-network access expose or affect sensitive data when a legitimate user is induced to perform an action, though a high-complexity precondition limits reliable exploitation. The affected models, firmware branches, and vulnerable feature are not specified in the available data; HPE bulletin hpesbnw05162en_us is the authoritative reference for scope and fixes. No public exploit code is identified at time of analysis, and the assessed vector rates confidentiality, integrity, and availability impact as High.
Adjacent-network attackers can cause high availability impact and minor integrity changes on HPE networking devices through CVE-2026-95710, which carries a CVSS 3.1 base score of 7.1. The vector (AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H) means an attacker on the same Layer-2 segment or a logically adjacent network needs no credentials and no user interaction, and the flaw is not reachable from the open internet without first reaching that segment. No public exploit code or CISA KEV entry was identified at time of analysis, and the trigger itself is not described in the available sources.
High-severity network-reachable flaw in HPE networking products can let attackers who already hold high-level privileges affect confidentiality, integrity, and availability. The exact affected models, firmware versions, and triggering feature are not described in the available sources; HPE bulletin hpesbnw05162en_us is the authoritative reference. No public exploit identified at time of analysis.
High-privilege attackers can achieve full confidentiality, integrity, and availability impact on affected HPE networking devices over the network, according to the CVSS 3.1 vector (7.2) with PR:H, AC:L, and UI:N. The high-privilege prerequisite excludes unauthenticated and low-privilege actors, but an already-authenticated administrator can reach the flaw without user interaction. No public exploit has been identified at time of analysis, and the exact product, versions, and trigger are not described in the supplied sources; HPE bulletin hpesbnw05162en_us should be consulted for scope.
An authenticated administrator of an HPE networking product can reach a low-complexity, network-exposed flaw and achieve full confidentiality, integrity and availability impact on the affected component, according to an HPE security bulletin (document HPESBNW05162) scored at CVSS 3.1 base 7.2. The vector AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H confirms the issue is remotely reachable with no user interaction, but the high-privilege prerequisite (PR:H) means only an attacker who already holds an administrative or otherwise privileged account on the device can exploit it, so the realistic exposure is an insider, a compromised administrative credential, or a post-exploitation step, not anonymous internet attack. No public exploit code or proof-of-concept is referenced in the supplied sources, and the specific affected product, version, feature and protocol are not described in the available data.
Administrative users of an HPE networking product can abuse existing high privileges over the network to achieve full confidentiality, integrity, and availability impact under CVE-2026-79956 (CVSS 7.2). The flaw is remotely reachable with low complexity and no user interaction, but the PR:H vector means only attackers who already hold administrative access can exploit it, making insider or post-compromise abuse the realistic path. No public exploit was identified at time of analysis, and the HPE advisory is the primary source because no description or CWE was supplied.
Information disclosure in HPE networking products, tracked as CVE-2026-79891, can expose sensitive data to remote unauthenticated attackers when a high-complexity condition outside their direct control is satisfied; the CVE record is scored 8.1, while the independent assessment limits impact to confidentiality only. The affected product family, versions, feature, and exact prerequisite are not exposed in the supplied data, and the only vendor pointer is HPE security bulletin hpesbnw05162en_us. No public exploit was identified at time of analysis, and no CISA KEV status is present.
Information disclosure in HPE Networking products (CVE-2026-79890) has a CVSS 3.1 base score of 8.1; the assessed vector AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H describes remote, unauthenticated exploitation with no user interaction, while high attack complexity means success depends on conditions outside the attacker's full control. The affected HPE product, version range, and required configuration are not described in the available sources and must be confirmed from HPE bulletin hpesbnw05162en_us, and the tag only classifies the issue as Information Disclosure. No public exploit identified at time of analysis, and the vuln.today priority label is this_week; signals are mixed and the underlying data is thin.
An 8.1-severity remote flaw (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) affects an HPE networking product identified only through HPE security bulletin hpesbnw05162en_us; the specific product and version ranges are not present in the supplied data. Scoring combines full impact on confidentiality, integrity and availability with network reachability, no privileges and no user interaction, but high attack complexity means a condition outside the attacker's control must hold before exploitation succeeds, and that prerequisite is not described in any available source. No public exploit code and no confirmed active exploitation (CISA KEV) are associated with this record, and the only cited reference is the HPE bulletin itself; the vuln.today triage label is this_week, so this should be scheduled within the current patch cycle rather than treated as an emergency. Note the supplied tag reads "Information Disclosure" while the assessed vector claims high integrity and availability impact - that discrepancy is unresolved in the available data.
HPE has published advisory hpesbnw05162en_us for a network-reachable flaw tracked as CVE-2026-79887 that, per its CVSS 3.1 vector (8.1 High), can fully compromise confidentiality, integrity, and availability of the affected system. The specific product, version range, CWE class, and the precondition implied by the high attack complexity (AC:H) are not stated in the available input, so the exact feature or configuration an attacker must arrange remains unconfirmed and must be read from the HPE advisory. No CISA KEV listing, no public exploit code, and no EPSS score were supplied at time of analysis; the single-source tag labels the issue 'Information Disclosure', which is narrower than the total-impact vector and should be reconciled against the vendor advisory. Prioritization signal from vuln.today places this in the 'this_week' queue rather than act_now or emergency.
HPE networking products are affected by a remotely reachable, unauthenticated flaw rated CVSS 8.2 (AV:N/AC:L/PR:N/UI:N, C:N/I:L/A:H), where the dominant risk is loss of availability with a limited integrity impact rather than the exposure of data. The single supplied source - HPE security bulletin hpesbnw05162en_us - is the only authoritative record of which platforms and firmware revisions are in scope, because no CVE description, CPE mapping, or version range was included in the intelligence feed. No public exploit code or PoC reference was identified at time of analysis, and the issue has not been added to CISA KEV; it carries a this_week priority label, so remediation should be scheduled within the current patching cycle rather than treated as an emergency.
Information disclosure in HPE networking devices allows unauthenticated attackers on the same adjacent network segment to obtain high-confidentiality data, with the CVSS 3.1 base score of 8.2 reflecting changed scope, no integrity impact, and low availability impact. The exact affected models, firmware versions, and trigger conditions are not described in the available sources; HPE bulletin hpesbnw05162en_us is the sole reference for scope and remediation. No public exploit code was identified at time of analysis.
Information disclosure in HPE network devices, with the exact affected model and firmware not identified in the supplied data, allows attackers on an adjacent network segment to read sensitive data and cause limited integrity and availability impact without authentication or user interaction. The CVSS 3.1 score is 8.3, with the vector requiring same-segment access (AV:A) rather than internet-wide reachability, low attack complexity, no privileges, and no user interaction. No public exploit or CISA KEV entry is identified at time of analysis, and the specific triggering feature is not described in the available sources.
Information disclosure affecting an HPE product line that has not been named in the supplied data can be triggered by an attacker positioned on the adjacent network, with the assessed vector (CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H, 8.3) indicating high confidentiality, integrity and availability impact that crosses a security scope boundary. No authentication or user interaction is required, but high attack complexity means success depends on conditions outside the attacker's direct control, and exposure is confined to the same broadcast domain or a logically adjacent segment rather than the public Internet. No public exploit code has been identified at time of analysis and there is no CISA KEV entry; the report originates from HPE's own security alert channel and priority guidance places remediation in this week's window, yet no CVE description, CWE mapping, CPE inventory, or fixed version has been supplied, leaving HPE bulletin hpesbnw05162en_us as the only authoritative reference.
CVE-2026-79881 is a high-severity (CVSS 8.3) network-reachable flaw in an HPE product, documented only through the vendor bulletin referenced as hpesbnw05162en_us, which is the identifier format HPE uses for its networking/Aruba security bulletins; the specific product, version range and trigger are not stated in the supplied data. Per the assessed vector (AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H), no prior authentication is needed, but successful exploitation requires the target user to perform an action and depends on high-complexity conditions that are not fully under the attacker's control, with a scope change implying impact beyond the initially vulnerable component. Intelligence tags the issue as Information Disclosure, which sits awkwardly with the vector's high confidentiality, integrity and availability impacts - that inconsistency, combined with the absence of a description or CWE, means the real-world impact cannot be verified from the available sources; no public exploit has been identified at time of analysis and there is no CISA KEV entry. The vulnerability is queued under a 'this_week' priority label rather than an emergency/act-now designation.
HPE networking equipment is affected by a high-severity flaw (CVSS 3.1 base 8.7) that a privileged, authenticated attacker can reach over the network with no user interaction, resulting in high integrity and availability impact that extends beyond the vulnerable component itself (S:C) while leaving confidentiality unaffected (C:N). Only attackers who already hold high privileges (PR:H) on the affected product can realistically trigger it, so exposure is concentrated among insiders and adversaries who have already established a privileged foothold rather than unauthenticated internet scanners. No public exploit code has been identified at time of analysis and the issue is not in CISA KEV; HPE has published an advisory under hpesbnw05162en_us, and the vendor's own notification lists the issue as an information-disclosure-class concern.
Unauthenticated attackers positioned on an adjacent network segment can compromise an HPE networking device with high impact to confidentiality, integrity, and availability, scored CVSS 3.1 8.8 (AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). The affected product line, feature, protocol, and version range are not stated in the supplied data, which contains no description and only a single HPE advisory reference (hpesbnw05162en_us); the one limiting prerequisite confirmed by the vector is network adjacency, meaning the attacker must share an L2 broadcast domain or logically adjacent network rather than reaching the device from the open internet. No public exploit code or KEV entry is indicated at time of analysis, the priority label is this_week, and no vendor-released fix version is specified in the available intelligence.
An unauthenticated, low-complexity flaw in HPE networking equipment (reported to HPE PSIRT under advisory hpesbnw05162en_us) allows an attacker positioned on the same Layer-2 segment, VLAN, or directly-connected local network to achieve high confidentiality, integrity, and availability impact, per the assessed CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H vector (base 8.8). No CVE description or CWE was published, so the specific feature, protocol, or configuration that must be reached to trigger the flaw is not identified in the available sources, and the 'Information Disclosure' tag is narrower than the assessed impact triad. No public exploit code or CISA KEV entry is present in the supplied intelligence, and the vulnerability is not reachable from a routable internet path - the adjacency requirement is the primary limiting factor. The vuln.today decision label places remediation in the 'this_week' queue.
HPE networking devices are affected by a CVSS 9.3 flaw that an unauthenticated attacker on an adjacent network can trigger without user interaction, producing high confidentiality and availability impact while integrity impact is rated none; the supplied data does not name the affected feature, protocol, or trigger condition. The independent assessment identifies adjacent-network reachability of the HPE device as the key gating prerequisite, and the vuln.today decision label is act_now. No KEV listing or public exploit reference is present, so no public exploit is identified at time of analysis, and the overall signals remain mixed and incomplete.
Affected HPE devices allow adjacent-network attackers to achieve high confidentiality and integrity impact without authentication or user interaction, per the assessed vector CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N; the exact product line, models, and software versions are not identified in the supplied data. The vuln.today decision label is act_now, but no CISA KEV entry or public exploit reference is present in the supplied intelligence, and no public exploit was identified at time of analysis. Security teams should treat the issue as high severity for devices reachable from Layer 2/adjacent segments while confirming affected product details through the HPE advisory.
An unauthenticated, low-complexity security flaw affects an as-yet-unnamed HPE product documented in HPE security bulletin hpesbnw05162, carrying a base CVSS 3.1 score of 9.3 (AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N) and triaged as act_now. The only barrier to exploitation is network position: an attacker must sit on an adjacent Layer 2 segment, broadcast domain, or directly connected logical network, after which no credentials or user interaction are required and impact extends past the vulnerable component to a separate security authority with high confidentiality and integrity consequences. No public exploit code or proof-of-concept reference was identified at time of analysis, and the vulnerability is not listed as confirmed actively exploited (CISA KEV); the specific triggering feature, protocol, or configuration is not described in the available sources, and no CWE has been assigned.
Unauthenticated attackers positioned on the same adjacent network segment can both read and modify data on affected HPE networking devices, according to CVE-2026-79873 (CVSS 3.1 base 9.3, AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N). The flaw requires no credentials and no user interaction and changes scope, meaning the attacker's control can extend beyond the vulnerable component, but the attack path is confined to the local LAN, VLAN, wireless, or management segment rather than being reachable from the open internet. No description has been published and no public exploit code has been identified at time of analysis; the vulnerability is not in CISA KEV, and the accompanying HPE advisory (hpesbnw05162en_us) is the authoritative source for affected models, trigger conditions, and fixes, which the reporting feed has tagged as involving information disclosure.
A critical-severity (CVSS 9.4) flaw affects an as-yet-unnamed HPE networking product, exposed through a network-reachable interface that remote attackers can reach without authentication or user interaction (AV:N/AC:L/PR:N/UI:N), with high confidentiality and integrity impact and a lesser availability impact. The only public reference is HPE advisory hpesbnw05162en_us, and no CVE description, CWE classification, or CPE data was supplied, so the affected product family, version ranges, and the specific interface involved remain unconfirmed. Third-party triage assigns this an act_now priority, but no public exploit code and no CISA KEV entry are associated with the record at time of analysis, so the urgency rests on the severity vector and the vendor's own security-alert notification rather than on observed exploitation.
An attacker positioned on an adjacent network can achieve high confidentiality, integrity and availability impact against an affected HPE networking device, reflected in a 9.6 CVSS base score from the vector AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H. No authentication and no user interaction are required once the attacker is on the same Layer-2 segment, VLAN or broadcast domain, and the scope-change metric means the compromise can affect resources beyond the vulnerable component itself; the limiting factor is purely the adjacency requirement, so arbitrary internet-side attackers are not in the threat model. No public exploit code has been identified at time of analysis, EPSS and KEV data were not supplied, and the single reference is an HPE support advisory; the vulnerable feature or protocol and the exact trigger are not described in the available sources.
Full-scope confidentiality, integrity, and availability compromise of affected HPE networking devices is possible for an unauthenticated attacker positioned on the same adjacent network (CVSS 9.6, AV:A/AC:L/PR:N/UI:N/S:C). The CVE record supplies no description, CWE, CPE, patch version, KEV status, or exploit reference, so the specific feature and affected models cannot be confirmed from the provided data; the HPE bulletin is the only source carrying product-level detail. No public exploit identified at time of analysis, but the act_now priority label and changed-scope high-impact vector justify urgent validation against that bulletin.
High-severity (CVSS 9.6) compromise of HPE networking devices is possible from an adjacent-network position: an unauthenticated attacker on the same LAN segment, VLAN, or directly attached network can trigger the flaw with low complexity and no user interaction, and the changed-scope impact is rated high for confidentiality, integrity, and availability. The source tag labels this as Information Disclosure, while the assessed vector also scores high integrity and availability impact; the specific triggering feature or protocol is not described in the supplied sources. HPE's bulletin is the sole reference, no public exploit is identified at time of analysis, and the vuln.today priority is act_now.
HPE networking products are affected by a CVSS 9.6 scope-changing flaw (CVE-2026-79867) tagged as information disclosure but assessed with high confidentiality, integrity, and availability impact. Exploitation requires adjacent-network positioning with no authentication and no user interaction, while affected models and firmware versions are not enumerated in the supplied data. The priority label is act_now; no CISA KEV entry or public exploit reference was supplied, so no public exploit is identified at time of analysis.
A critical-severity (CVSS 9.6) unauthenticated flaw affects an unspecified HPE product, reported directly to the vendor by security-alert@hpe.com and tracked in HPE advisory hpesbnw05162en_us. An attacker positioned on an adjacent network segment (same broadcast/L2 domain, VLAN, or wireless network) can trigger it without credentials or user interaction, resulting in scope-changed high impact to confidentiality, integrity, and availability. The vuln.today Decision label is act_now; because no CVE description was published, the specific triggering feature, protocol, and exact affected versions must be taken from the HPE advisory, and no public exploit code or CISA KEV entry is indicated in the available data.
HPE networking devices are exposed to a critical, unauthenticated attack from an adjacent network position, with the assessed CVSS 3.1 vector (AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) indicating low-complexity exploitation that can produce high confidentiality, integrity, and availability impact and may extend to other systems through changed scope. HPE's own security team reported the issue via advisory hpesbnw05162en_us, and the vuln.today decision label is act_now. No CISA KEV entry or public exploit reference appears in the supplied intelligence, so no public exploit is identified at time of analysis; the supplied tag says Information Disclosure, but the assessed vector indicates impacts well beyond confidentiality alone.
Unauthenticated, network-reachable exploitation of an HPE networking product carries a CVSS 3.1 score of 9.8 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), meaning an attacker with only network access could achieve high confidentiality, integrity and availability impact without credentials or user interaction. The only source in the supplied intelligence is the HPE security bulletin hpesbnw05162en_us; no CVE description, CWE, CPE, affected version list or fixed-version information was provided, so the specific vulnerable component and the trigger conditions are not described in the available sources. The vuln.today decision label is act_now, and no KEV listing or public exploit code was identified at time of analysis, though the bulletin itself could not be retrieved to confirm either signal. The supplied tag reads 'Information Disclosure', which is narrower than the assessed high impact on all three security pillars and should not be relied on as a description of scope.
HPE products covered by Security Bulletin hpesbnw05162 carry a critical-severity (CVSS 9.8) flaw reachable over the network, and vulnerability intelligence flags it as an act-now item, yet the affected component, configuration, and version range cannot be named from the supplied data. The CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U vector with C:H/I:H/A:H means exploitation would require only network reachability to the affected service, with no authentication and no user interaction, against whatever deployment is ultimately confirmed applicable. The record is tagged Information Disclosure, which sits awkwardly against a vector scoring full integrity and availability impact, so the actual impact class should be confirmed from the bulletin before it is relied upon. No public exploit code has been identified at time of analysis and the CVE is not listed in CISA KEV, so no confirmed active exploitation exists; the trigger itself is not described in the available sources.
HPE networking products are affected by a high-severity issue (CVSS 9.8) tracked as CVE-2026-79857, with a remote, unauthenticated vector (AV:N/AC:L/PR:N/UI:N) and high confidentiality, integrity, and availability impact. The CVE record contains no description, CWE, CPE, or version data, and the supplied tag labels it as information disclosure; the exact feature and affected configurations are not described in the available sources. No KEV designation or public exploit code is present in the supplied intelligence, so no public exploit was identified at time of analysis, but the vuln.today decision label is act_now and the HPE advisory hpesbnw05162en_us is the authoritative source for scope and fixes.
A critical-severity flaw (CVSS 9.8) affects an unspecified HPE product per an HPE security advisory (hpesbnw05162en_us), allowing network-reachable, low-complexity attacks that require no authentication or user interaction and can fully compromise confidentiality, integrity, and availability. The available intelligence contains no CVE description, no CWE classification, and no product or version detail, so the precise vulnerable component and trigger cannot be confirmed; the single NVD reference resolves to the HPE support advisory, which must be consulted for the authoritative affected-product list. No public exploit or active-exploitation reporting is included in the supplied data, but the internal decision label is act_now, so treat remediation as immediate and verify exposure against the vendor advisory before assuming any deployment is unaffected.
Unauthenticated remote compromise of HPE networking products is described by a maximum-severity CVSS 3.1 score of 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), a profile that implies full loss of confidentiality, integrity and availability from a network-reachable position with no privileges and no user interaction. The only substantive source is the HPE Security Bulletin hpesbnw05162en_us; the CVE record itself carries no description, no CWE mapping and no CPE data, so the vulnerable service, required configuration and affected version range cannot be confirmed from the supplied material. No CISA KEV entry and no public exploit code were identified at time of analysis, although the item is triaged act_now; the supplier-supplied tag reads 'Information Disclosure', which may point to a narrower real-world impact than the full-CIA vector suggests, and that discrepancy is unverified.
Remote, unauthenticated exploitation of an HPE networking service carries a vendor-scored CVSS 9.8 critical impact: low-complexity network access with no user interaction can affect confidentiality, integrity and availability at high severity. The supplied intelligence provides no CVE description, CWE, CPE or version range, so the exact product feature, configuration and trigger remain unconfirmed and must be established from HPE bulletin hpesbnw05162en_us. An 'Information Disclosure' tag is the only mechanism clue; no CISA KEV status is included and no public exploit identified at time of analysis, while the vuln.today decision is act_now.
HPE networking equipment carries a maximum-severity CVSS 9.8 rating under a CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H vector, meaning a network-reachable attacker without credentials or user interaction could fully compromise confidentiality, integrity and availability. The CVE record itself ships with no description, no CWE and no CPE data, and the only reference is an HPE support document (hpesbnw05162en_us), so the specific product line, firmware branch, exposed protocol and version range cannot be confirmed from the available sources. No public exploit code has been identified at time of analysis and the flaw is not in CISA KEV, yet the vuln.today priority label is act_now - urgency signals therefore conflict with the absence of confirmed exploitation activity, and the HPE advisory should be treated as the authoritative source before scoping exposure.
Remote, unauthenticated attackers can achieve full confidentiality, integrity, and availability impact against an affected HPE networking product, per a CVSS 3.1 base score of 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). The specific vulnerable component, protocol, and affected version range are not described in the available sources; HPE published only a support bulletin (hpesbnw05162en_us) and no CVE description or CWE mapping was supplied, and the record carries an Information Disclosure tag that is difficult to reconcile with the full impact triad. No CISA KEV listing, no public exploit code, and no EPSS score were provided, but the vuln.today priority decision is act_now, so treat exposure as urgent pending confirmation from the HPE bulletin.
HPE security bulletin hpesbnw05162en_us documents a maximum-severity (CVSS 10.0) exposure in an HPE product that is not named in the available data, so the specific affected platform and version range remain unresolved. The assessed vector describes unauthenticated, network-reachable exploitation at low complexity with no user interaction and a changed scope, meaning impact is judged capable of reaching beyond the vulnerable component to give high confidentiality, integrity and availability loss. A single source tag labels the issue as information disclosure, which does not fully reconcile with the High integrity and availability ratings in the vector; no CVE description, CWE, CPE data, KEV entry or public exploit reference was supplied, so active exploitation is not confirmed and no public exploit was identified at time of analysis. The vuln.today priority decision is act_now, driven by the maximum severity score rather than by corroborated in-the-wild activity.
A maximum-severity, network-reachable flaw (CVSS 3.1 base 10.0) in an as-yet-unnamed HPE product allows remote attackers to achieve high confidentiality, integrity and availability impact across a scope boundary without authentication or user interaction. The affected product line, feature, protocol and version range are not stated in the available data; the only authoritative source is HPE security bulletin hpesbnw05162en_us, which must be consulted to identify the exact product and fixed build. No public exploit code has been identified at time of analysis and the CVE is not listed in CISA KEV, but the vulnerability is tagged 'Information Disclosure' while the assessed vector also scores high integrity and availability impact, so the true impact profile should be confirmed from the vendor bulletin. Vuln.today priority is act_now based on the assessed vector.
Unauthenticated network attackers can potentially achieve high confidentiality, integrity, and availability impact against an HPE networking product, based on the supplied CVSS 3.1 vector scoring 10.0 with scope change. The CVE has no description and no published affected version range; the HPE Security Bulletin hpesbnw05162en_us is the only reference, and the exact product feature, deployment mode, and trigger remain unverified. No public exploit is identified at time of analysis.
HPE advisory hpesbnw05162en_us covers a product flaw carrying a CVSS 3.1 base score of 10.0 (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H), meaning remote, unauthenticated access with no user interaction and full confidentiality, integrity, and availability impact across a scope change. The affected product, versions, and trigger are not stated in the supplied data and must be confirmed from the bulletin; no CISA KEV entry was supplied and no public exploit was identified at time of analysis, though the vuln.today decision label is act_now.
Unauthenticated remote attack against an HPE networking product carries the vendor's maximum CVSS 3.1 base score of 10.0, reflecting network reachability with low complexity, no privileges and no user interaction, a scope change, and high confidentiality, integrity and availability impact. The HPE bulletin referenced as hpesbnw05162en_us is the only source supplied: no description, CWE, CPE, version range or fixed-version information was provided, so the specific affected product line, exposed interface and trigger remain unconfirmed. No public exploit code was identified at time of analysis, and CISA KEV status is not indicated, but the single-source nature of this record means the product and version scope must be confirmed directly against the advisory before exposure can be judged.
Information disclosure in an unspecified HPE Networking product is tracked as CVE-2026-79844, but the supplied record contains no CVE description, CWE, CPE, or affected-version data, so the exact component at risk is unconfirmed. The independent assessment rates the issue as network-reachable, low-complexity, unauthenticated, and no-interaction, with high confidentiality impact and no integrity or availability impact; the source's 10.0 score is broader and is not adopted by that assessment. vuln.today assigns an act_now priority, while no CISA KEV status is present and no public exploit identified at time of analysis.
Authenticated remote code execution in HPE Networking ClearPass Policy Manager allows an attacker who already holds high-privilege administrative access to the management interface to run arbitrary commands on the underlying operating system, potentially leading to full host compromise. The flaw is remotely reachable (AV:N), requires no user interaction (UI:N) and has low attack complexity (AC:L), but its severity is bounded by the CVSS PR:H prerequisite - only administrator-level accounts can trigger it, so exploitation realistically depends on credential compromise, insider access, or chaining from a separate authentication or privilege-escalation weakness. No public exploit code has been identified at time of analysis and the issue is not confirmed actively exploited (no CISA KEV listing); with a base score of 7.2, this is assessed as a moderate-priority issue rather than a top-tier emergency, though the confidentiality, integrity and availability impact on a successful hit is high.
Buffer overflow in the HPE Aruba ClearPass Policy Manager OnGuard agent lets an authenticated local user execute arbitrary code with elevated privileges or crash the agent, disrupting endpoint posture enforcement. Exploitation requires an existing low-privileged session on the endpoint where the agent is installed and running and cannot be triggered remotely, since the attack vector is local (AV:L, PR:L) while the privilege gain is High across confidentiality, integrity, and availability. HPE has published a vendor advisory, but no public exploit code has been identified at time of analysis; at CVSS 7.8 this is a credible but not emergency-level priority, most relevant to hosts where unprivileged local users and the OnGuard agent coexist.
Missing integrity verification in the HPE Networking ClearPass Policy Manager client agent allows remote unauthenticated attackers to introduce untrusted code that the agent then executes on the enrolled client system, giving full code execution on that endpoint. Only systems running the vulnerable client agent (for example OnGuard deployments) are exposed; the ClearPass server itself is not the target of this flaw, and organizations that do not deploy the agent are unaffected. The input CVSS of 9.8 reflects the worst case, but the authoritative independent assessment scores it AV:N/AC:H, because the attacker must first be able to supply or substitute the code the agent consumes - typically a man-in-the-middle position on the agent's communication or update channel, or control of a source the agent implicitly trusts. There is no evidence of confirmed active exploitation (not in CISA KEV) and no public exploit code identified at time of analysis, so the practical risk is conditional on the attacker obtaining that network positioning or trusted-source access.
Stored cross-site scripting in the web-based management interface of Aruba/HPE ClearPass Policy Manager allows a remote attacker to plant script that is stored by the application and later executes in the browser of an administrative user who views the affected page. Consistent with our independent assessment (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N), the injection step requires no authentication, but the payload only fires after an authenticated administrator interacts with the affected view, yielding high confidentiality and integrity impact within that administrative session; the vendor/NVD vector rates it 8.8 under a slightly different scope/impact model. No public exploit code and no evidence of active exploitation were identified at time of analysis (CVE-2026-79799 is not in CISA KEV, and no EPSS score was supplied), so this is a credible, moderately high priority for organizations running ClearPass - particularly those that expose the management interface beyond an isolated management network or trusted admin VLAN.
Authentication bypass in HPE Aruba Networking ClearPass Policy Manager allows an unauthenticated remote attacker to circumvent existing authentication controls on the affected interface and gain unauthorized access to the system, rated CVSS v3.1 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). No public exploit code was identified and the vulnerability is not confirmed actively exploited (no CISA KEV), but the assessed vector shows no credentials, no user interaction and no special configuration required, implying default-configuration exploitability where the interface is reachable. Independent assessment concludes the available signals point to a genuine high-priority issue rather than a CVSS-inflated non-issue; the exact affected versions and the specific exposed service are not named in the available HPE bulletin, so exposure of the interface is the primary risk-limiting factor.
Unauthenticated SQL injection in HPE Aruba Networking ClearPass Policy Manager allows a remote attacker who can reach the affected interface to inject arbitrary SQL into the application's database layer, with successful exploitation enabling execution of arbitrary database commands. The flaw carries a CVSS 3.1 base score of 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), meaning no credentials or user interaction are required and the confidentiality, integrity, and availability impact is total; any ClearPass instance whose management/web service is reachable from an untrusted network is directly at risk. No public exploit code has been identified at time of analysis and the flaw is not in CISA's KEV catalog, but the pre-authentication, network-reachable profile and the database-command execution outcome make this a high-priority item for exposure reduction and patching per the HPE advisory.
Unauthenticated remote code execution is the exposure created by a format string flaw in a service interface of HPE Networking ClearPass Policy Manager: an attacker who can reach the vulnerable interface can supply crafted input that corrupts process memory and, on successful exploitation, execute arbitrary code in the context of the affected service, with high confidentiality, integrity and availability impact (CVSS 3.1 9.8, AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). No public exploit code or confirmed active exploitation is identified at the time of analysis, and the report originates from HPE's own security-alert address, but the absence of authentication, user interaction or attack complexity means exploitation is straightforward for any attacker with network reachability to the interface. The practical limiting factor is exposure: ClearPass management and service interfaces are normally confined to segmented management networks, so internet-facing or user-network-reachable deployments carry the greatest immediate risk.
Authentication bypass in HPE Networking ClearPass Policy Manager allows an unauthenticated remote attacker to circumvent existing authentication controls on the product's web-based management and API interfaces and obtain administrative access to the affected system. The flaw carries a vendor-assessed CVSS of 9.8 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), meaning no credentials, no user interaction, and no special configuration are required - only network reachability to a management or API endpoint, which in many deployments is restricted to management VLANs or admin networks, making exposure control the primary practical limiting factor. Our assessment rates this a genuine top-priority vulnerability rather than a high-CVSS-but-low-real-risk case; no public exploit code and no confirmed active exploitation were identified at time of analysis, and ClearPass is a network access control / policy enforcement platform, so administrative compromise can extend impact well beyond the appliance itself.
Missing integrity verification in the HPE ClearPass Policy Manager OnGuard agent allows an unauthenticated, remote attacker to execute arbitrary code with the agent's elevated privileges on managed endpoints. In practice, exploitation requires the attacker to intercept, modify, or impersonate the data/update channel the agent trusts (e.g., adversary-in-the-middle or rogue server), meaning the vendor's low-complexity rating (CVSS 9.8) is tempered by this positioning requirement. No public exploit code has been identified at time of analysis, and there is no indication of active exploitation (not in CISA KEV).
Unauthenticated remote code execution in the web interface of HPE Networking ClearPass Policy Manager allows an attacker who can reach that interface over the network to run arbitrary code on the appliance. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, 9.8) confirms no authentication, no user interaction, and low attack complexity, with full confidentiality, integrity, and availability impact - a genuine high-priority vulnerability rather than a high-CVSS-but-low-risk artifact. No public exploit identified at time of analysis; the practical limiting factor is network exposure of the ClearPass web interface, so deployments reachable from the internet or broad internal networks are at direct risk while those restricted to isolated management networks or behind VPN/firewall controls are substantially less exposed.
Command injection in HPE Networking Instant ON firmware versions up to and including 3.4.1.0 allows an authenticated remote attacker with high (administrator) privileges to execute arbitrary commands on the underlying operating system, resulting in full loss of confidentiality, integrity, and availability (CVSS 7.2). The flaw is network-reachable (AV:N) with low complexity (AC:L) and requires no user interaction (UI:N), but exploitation requires prior admin-level authentication (PR:H) to the management interface. No public exploit code has been identified at time of analysis, and the issue is not listed in CISA KEV.
An authentication bypass in the API endpoint of HPE Networking Instant ON (affected versions 0.0.0.0 through 3.4.1.0) allows an unauthenticated, network-positioned attacker to circumvent network access controls and reach restricted networks without credentials or user interaction. The vendor-published CVSS 3.1 base score is 8.1 (High), but our independent assessment retains AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N because exploitation is gated by preconditions outside the attacker's control - the vulnerable state is transient and cannot be forced, so success depends on catching a device in that window rather than on attacker skill. There is no indication of active exploitation (no CISA KEV listing in the supplied intelligence) and no public exploit identified at time of analysis, so the practical risk is a genuine but conditionally-gated one rather than an immediately weaponizable remote compromise.
Authentication controls in the management protocol of HPE Networking Instant On access points (firmware ≤3.4.1.0) can be circumvented by an unauthenticated attacker who is adjacent to the device, resulting in a complete bypass of security restrictions and potentially remote code execution with elevated privileges. Exploitation requires only network adjacency - an associated Wi-Fi client, guest-network user, or any host on the same Layer 2 segment - with no credentials, no user interaction, and low attack complexity, which is why the CVSS 3.1 score reaches 9.6. No public exploit code and no confirmed active exploitation were identified at time of analysis, and devices already updated beyond firmware 3.4.1.0 are not affected.
Unauthenticated command injection in the CLI of HPE Networking Instant On access points allows an attacker on the same adjacent network segment - within wireless range or on the same link-layer/LAN - to send specially crafted packets and execute arbitrary commands as a privileged user on the underlying operating system. Any Instant On AP running firmware up to and including 3.4.1.0 in its default configuration is affected, and the scope change (S:C) in the CVSS vector means compromise of the AP can extend into the host OS and anything it can reach. At the time of analysis no public exploit code or active exploitation telemetry has been identified, but the CVSS base of 9.6, the zero-privilege, zero-interaction attack path, and the ease of obtaining adjacent-network access make this a genuinely high-priority, patching-urgent issue rather than a theoretical one. There is no public exploit identified at time of analysis.
Unauthenticated attackers on the same Layer-2/wireless broadcast domain as an HPE Networking Instant On access point can trigger a buffer overflow in an exposed interface and execute arbitrary commands on the device's underlying operating system. Firmware versions at or below 3.4.1.0 are affected, including default configurations, and the CVSS 3.1 base score of 9.6 reflects a scope change (S:C) from the network-facing interface to the AP operating system, with high confidentiality, integrity, and availability impact. The adjacency requirement (AV:A) is the primary limiting factor, confining realistic attackers to associated Wi-Fi clients, hosts on the local LAN, or anyone with physical proximity; no public exploit code and no CISA KEV entry were identified in the provided data, and no EPSS score was supplied, so exploitation is not confirmed as active at time of analysis.
Unauthenticated remote command execution is possible on HPE Networking Instant On access points running firmware version 3.4.1.0 and earlier, due to uncontrolled format string handling in an exposed interface of the device. Per the CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, base 9.8), an attacker who can reach that interface over the network needs no credentials and no user interaction, and successful exploitation can run arbitrary commands on the underlying host, causing denial of service or full compromise. No public exploit code has been identified at time of analysis and the issue is not listed as confirmed actively exploited (CISA KEV), but the low attack complexity and default-configuration reachability make it a genuine high-priority exposure for any Instant On AP whose vulnerable interface is accessible from an untrusted segment.
Unauthenticated remote code execution in HPE Networking Instant On firmware through 3.4.1.0 allows an attacker who can reach the device's affected network interface to exploit a buffer overflow and execute arbitrary code as a privileged user on the underlying host (CVSS 9.8, AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). No public exploit code and no confirmed active exploitation (CISA KEV) were identified at time of analysis, but exploitation requires only network reachability to the exposed interface, so internet-facing or unsegmented Instant On access points and switches carry the greatest exposure. HPE has addressed the flaw in firmware versions above 3.4.1.0.
Root-level remote code execution in HPE Analytics and Location Engine (ALE) can be achieved when an attacker first establishes a man-in-the-middle position on the network path to the appliance's administrative component and an administrator then interacts with that component. The CVSS 7.1 vector (AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) confirms that no authentication is needed once the MitM and user-interaction preconditions are met, and successful exploitation grants root privileges. No public exploit code has been identified at time of analysis, and the provided data does not specify a patched version.
Root-level file system access in HPE Analytics and Location Engine (ALE) can be obtained by an authenticated administrator through the product's maintenance restore function, which processes attacker-supplied restore data with root privileges and permits writes to the host file system (CVSS 3.1 base 7.2 High, AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H). Because the vector requires high privileges (PR:H), the practical attack surface is limited to administrators or adversaries who have already compromised an admin account, though the flaw is network-reachable (AV:N) and needs no user interaction (UI:N). No public exploit code was identified and there is no confirmed active exploitation at time of analysis.
Unauthenticated data injection in HPE's Analytics and Location Engine (ALE) lets any attacker who can reach the ALE service socket send specially crafted input during connection setup and corrupt the data the component handles. The flaw carries a CVSS 3.1 base score of 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) - remote, low complexity, no credentials and no user interaction required, with impact confined to integrity; confidentiality and availability are unaffected. There is no indication of active exploitation (CISA KEV) and no public exploit identified at time of analysis, so the practical risk is driven by exposure: ALE is an internal enterprise WLAN analytics component, and instances whose listening socket is reachable from untrusted or flat network segments carry the greatest risk.
Unauthenticated remote write access to the file system with elevated privileges in HPE Analytics and Location Engine (ALE) lets any attacker who can reach the product's internal administrative component overwrite files as a privileged user, with the potential for full system compromise. The flaw carries a CVSS v3.1 base score of 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), meaning no authentication, no user interaction, and no special privileges are required against a vulnerable instance; the practical constraint is network reachability, since ALE admin interfaces are normally confined to internal management networks rather than exposed to the internet. No public exploit code was identified at time of analysis and the issue is not listed as confirmed actively exploited (CISA KEV), but the combination of an authentication-bypass class defect, a critical severity rating, and privileged file-write impact makes this a genuinely high-priority remediation item wherever ALE is deployed.
Default, hard-coded credentials shipped on several administrative and system accounts in HPE's Analytics and Location Engine (ALE) allow an unauthenticated remote attacker to log straight into the management interface and the underlying operating system, yielding full compromise of the appliance. The flaw carries a CVSS 3.1 base score of 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) because no authentication, user interaction, or special configuration is required - the attacker only needs the known default secrets, which are typically published in advisories or recoverable from firmware - and there is no CISA KEV listing or public exploit code reported at time of analysis. Practical exposure is tempered by deployment context: ALE normally sits inside enterprise WLAN/management networks rather than on the public internet, so real-world risk depends on an attacker already having a foothold or reachability into those internal segments.
Unauthenticated remote denial-of-service in HPE Networking EdgeConnect SD-WAN Gateways (formerly Silver Peak), affecting firmware branches 9.4.x up to 9.4.8.2, 9.5.x up to 9.5.8.1, 9.6.x up to 9.6.3.1, and 9.7.0.0. An attacker who can reach the vulnerable gateway service can exhaust resources (CWE-400, uncontrolled resource consumption), rendering certain services on the appliance unavailable and disrupting SD-WAN connectivity for sites behind the gateway. The CVSS 3.1 score is 7.0 (AV:N/AC:H/PR:N/UI:N), and no public exploit code or CISA KEV listing was identified at time of analysis.
Adjacent-network attackers can crash HPE Networking EdgeConnect SD-WAN Gateways or leak small amounts of uninitialized stack memory by sending crafted traffic to the gateway, affecting unauthenticated devices reachable from the same Layer 2 segment. The flaw (CWE-200) carries a 7.1 CVSS score with the availability impact rated High and confidentiality impact Low, and it spans four maintained release trains from 9.4.0.0 through 9.7.0.0. It is not listed in CISA KEV, no public exploit code was identified in the supplied intelligence, and no EPSS probability was provided, so the immediate risk is driven by network adjacency and gateway exposure rather than confirmed mass exploitation.
A buffer overflow in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways allows an attacker who already holds high-privilege API credentials to execute arbitrary commands as a privileged operating-system user on the gateway appliance. Affected releases span the 9.4.x, 9.5.x, 9.6.x and 9.7.0.0 branches, per ENISA EUVD version ranges. The CVSS 3.1 vector requires PR:H, meaning exploitation is not unauthenticated; no public exploit was identified at time of analysis, and the issue is not listed in CISA KEV.
Authenticated attackers holding administrative access to the management plane of HPE Networking EdgeConnect SD-WAN Gateways can supply crafted input to an affected component and achieve arbitrary command execution as root. The flaw affects multiple released trains — 9.4.x up to 9.4.8.2, 9.5.x up to 9.5.8.1, 9.6.x up to 9.6.3.1, and 9.7.0.0 — with a CVSS base score of 7.2 reflecting the high privilege prerequisite against total loss of confidentiality, integrity, and availability. There is no CISA KEV entry, no EPSS score, and no public exploit code identified at time of analysis, so this is currently a high-impact but credential-gated risk rather than an actively exploited one.
Authenticated attackers who already hold administrative privileges on HPE Aruba EdgeConnect SD-WAN Gateways can supply specially crafted configuration data that overflows a stack buffer in the configuration processing logic, potentially yielding remote code execution as root or crashing the gateway into a denial of service. The flaw affects gateway releases in the 9.4.x (≤9.4.8.2), 9.5.x (≤9.5.8.1), 9.6.x (≤9.6.3.1) and 9.7.0.0 branches per the ENISA EUVD affected-version list, and carries a CVSS 3.1 base score of 7.2 (AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H). No public exploit code, CISA KEV listing or EPSS score was included in the supplied intelligence, so the observed exploitation status is unconfirmed at time of analysis.
Authentication controls protecting the web-based management interface of HPE Aruba EdgeConnect SD-WAN Orchestrator can reportedly be circumvented by a remote actor, allowing escalation to administrative privileges and full compromise of the orchestrator host that manages the SD-WAN fabric. Reported affected releases span EdgeConnect SD-WAN software 9.4.0 through 9.7.0, with no fix version disclosed in the supplied source data. No public exploit code and no CISA KEV entry were identified at time of analysis, and no EPSS score was supplied, so exploitation status is best treated as unconfirmed.
Privilege escalation in the HPE Networking EdgeConnect SD-WAN Orchestrator API lets an attacker who already holds a low-privilege account elevate to root and run arbitrary operating-system commands on the appliance. The flaw is remotely reachable (AV:N) but requires authentication plus a high-complexity exploitation path per the assigned CVSS vector (7.5, AC:H, PR:L). No public exploit code or CISA KEV entry was present in the supplied intelligence, so this is currently a post-authentication hardening priority rather than an actively exploited zero-day.
Unauthenticated remote denial-of-service in HPE Networking EdgeConnect SD-WAN Gateways, where a flaw in the appliance's underlying operating system lets a network-reachable attacker crash or stall an affected service. All four maintained branches are impacted — 9.4.0.0 through 9.4.8.2, 9.5.0.0 through 9.5.8.1, 9.6.0.0 through 9.6.3.1, and 9.7.0.0 — with CVSS 7.5 reflecting a high availability impact and no confidentiality or integrity loss. No public exploit code and no CISA KEV listing were present in the source data at time of analysis, so this is currently a patch-now availability risk rather than a confirmed active campaign.
Unauthenticated remote code execution and denial-of-service in HPE Aruba Networking EdgeConnect SD-WAN Gateways (versions 9.4.0.0–9.4.8.2, 9.5.0.0–9.5.8.1, 9.6.0.0–9.6.3.1, and 9.7.0.0) arise from flawed parsing of malformed or truncated packets in the proxy packet-processing path, where incorrect length arithmetic triggers an integer overflow that can become a memory-corruption (buffer overflow) condition. Successful exploitation can let a network-positioned attacker execute code or crash the gateway, taking down the SD-WAN overlay. The HPE advisory at support.hpe.com confirms affected version ranges, but there is no CISA KEV listing, no EPSS score, and no public exploit code identified at time of analysis, so this is currently a patch-now, watch-for-exploitation item rather than a confirmed active campaign.
Unauthenticated remote attackers can circumvent the authentication controls exposed by the API of HPE Networking EdgeConnect SD-WAN Orchestrator, escalating to administrative privileges and achieving complete compromise of the orchestrator host. The vendor rates this 8.1 (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H), and EUVD maps the affected code lines to EdgeConnect SD-WAN releases 9.4.0 through 9.4.10, 9.5.0 through 9.5.8, 9.6.0 through 9.6.3, and 9.7.0. No CISA KEV listing or public exploit code was identified in the supplied intelligence, and EPSS data was not provided, so the practical exploitation risk rests on the high attack complexity (AC:H) noted in the vendor vector.
A buffer overflow in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways allows an unauthenticated remote attacker to execute arbitrary commands on the underlying host, resulting in full operating-system compromise of the appliance. Multiple maintenance trains are affected — 9.4.0.0 through 9.4.8.2, 9.5.0.0 through 9.5.8.1, 9.6.0.0 through 9.6.3.1, and the 9.7.0.0 release. The vendor's own CVSS rating is 8.1 (AV:N/AC:H/PR:N/UI:N), reflecting that exploitation is unauthenticated but gated by preconditions outside the attacker's control; no public exploit code or CISA KEV listing was identified at time of analysis.
A limited buffer overflow in the network security monitoring component of HPE EdgeConnect SD-WAN Gateways allows an unauthenticated remote attacker to crash the appliance and potentially execute code by driving crafted traffic into the monitoring parser. ENISA EUVD lists four affected release trains: 9.4.0.0 through 9.4.8.2, 9.5.0.0 through 9.5.8.1, 9.6.0.0 through 9.6.3.1, and 9.7.0.0. No CISA KEV entry and no public exploit code were identified at time of analysis, and no EPSS data was supplied with the record.
Incorrect authorization in the EdgeConnect SD-WAN Orchestrator API lets an authenticated remote user with low privileges retrieve sensitive information beyond what their role permits, and that data can potentially be leveraged to reach the SD-WAN network services the orchestrator manages. The vendor HPE/Aruba rates this 8.5 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N), and ENISA EUVD lists affected EdgeConnect SD-WAN Gateway releases in the 9.4.x, 9.5.x, 9.6.x and 9.7.0 lines. No public exploit code exists and the issue is not in CISA KEV at time of analysis; exploitation requires valid low-privilege credentials, which materially narrows the attacker population.
Server-side request forgery in the EdgeConnect SD-WAN Orchestrator API lets any remote user who already holds valid low-privilege credentials redirect server-side fetches to attacker-chosen internal destinations, mapping the internal structure of the Orchestrator host and disclosing sensitive information beyond that user's authorized privilege level. The issue is network-reachable at low attack complexity with no user interaction (CVSS 3.1: AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N, base 8.5), and the scope change reflects the pivot out of the API context into the host/network fabric. No public exploit code was identified at time of analysis and no CISA KEV entry is associated with this CVE; note that the description names the Orchestrator while the ENISA EUVD record lists EdgeConnect SD-WAN Gateway builds 9.4.0 through 9.7.0, so the exact affected component should be confirmed against the HPE advisory before scoping exposure.
Unauthenticated attackers positioned on an adjacent network segment can crash HPE Networking EdgeConnect SD-WAN Gateway appliances by sending crafted traffic, causing a denial of service that the device cannot recover from without manual intervention. All four maintained firmware branches are affected: 9.4.0.0 through 9.4.8.2, 9.5.0.0 through 9.5.8.1, 9.6.0.0 through 9.6.3.1, and 9.7.0.0. The vendor rates this 8.6 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H) and the only publicly indexed advisory is HPE's own security bulletin (hpesbnw05135en_us); no CISA KEV listing, EPSS score, or public proof-of-concept code was present in the supplied intelligence, so active exploitation is unconfirmed.
Low-privilege authenticated attackers can escalate to root on HPE Networking EdgeConnect SD-WAN Gateways by abusing an API endpoint, gaining the ability to run arbitrary operating-system commands. The flaw carries a CVSS base score of 8.8 (AV:N/AC:L/PR:L/UI:N), meaning the attacker needs only valid low-privileged credentials and network reachability to the management API — no user interaction is required. Affected branches span EdgeConnect SD-WAN Gateways 9.4.x through 9.7.0.0; no public exploit code has been identified and the issue is not listed in CISA KEV at time of analysis.
Privilege escalation in the EdgeConnect SD-WAN Gateway API lets a remote, authenticated low-privileged user gain administrative rights on the web-management interface, resulting in complete compromise of the gateway (CVSS 8.8, AV:N/PR:L). Affected branches are 9.4.0.0–9.4.8.2, 9.5.0.0–9.5.8.1, 9.6.0.0–9.6.3.1, and 9.7.0.0. No public exploit code, EPSS score, or CISA KEV listing was provided at time of analysis; exploitation requires a valid low-privileged account and reachability of the management API.
A buffer overflow in the underlying operating system of HPE Aruba Networking EdgeConnect SD-WAN Gateways lets an unauthenticated attacker on an adjacent network segment execute arbitrary code as a privileged OS user, resulting in full compromise of the appliance. Affected branches span the 9.4.x, 9.5.x, 9.6.x and 9.7.0.0 release trains (up to 9.4.8.2, 9.5.8.1, 9.6.3.1 and 9.7.0.0 respectively). The vendor describes exploitation as conditional on preconditions outside the attacker's control, and no public exploit code, EPSS score or CISA KEV entry was present in the supplied intelligence at time of analysis.
Authenticated command injection in the command-line interface of HPE Aruba EdgeConnect SD-WAN Gateways allows an attacker who already holds high-privileged CLI credentials to break out of the appliance shell and execute arbitrary commands on the underlying operating system, resulting in complete compromise of the gateway. The flaw affects the 9.4.x, 9.5.x, 9.6.x and 9.7.x maintenance streams (9.4.0.0–9.4.8.2, 9.5.0.0–9.5.8.1, 9.6.0.0–9.6.3.1 and 9.7.0.0) and carries a vendor-assigned CVSS of 9.1 with a scope change from the CLI component to the host OS. No public exploit code or CISA KEV entry was identified at time of analysis, and no EPSS score was supplied, so the practical priority is driven by exposure of the management CLI rather than by evidence of active exploitation.
Unauthenticated remote code execution affects HPE Networking EdgeConnect SD-WAN Gateways running firmware in the 9.4.x, 9.5.x, 9.6.x, and 9.7.0.0 branches, where a buffer overflow in an underlying operating system service permits a network-reachable attacker to run arbitrary commands and fully compromise the appliance. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, 9.8) and the independent assessment agree that no credentials or user interaction are needed, so the practical limiting factor is whether the vulnerable interface is reachable from an untrusted network. No public exploit code has been identified at time of analysis and the issue has not been confirmed actively exploited (CISA KEV), but the severity, the network-edge placement of these devices, and the credential-free attack path make this a top-priority patch item for exposed gateways.
Unauthenticated remote attackers can bypass authentication controls in the EdgeConnect SD-WAN Orchestrator management API to gain administrative privileges and fully compromise the underlying host, rated 9.8 under CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. Affected builds per the EUVD advisory span EdgeConnect SD-WAN 9.4.0 through 9.4.10, 9.5.0 through 9.5.8, 9.6.0 through 9.6.3, and 9.7.0, although the description attributes the flaw to the Orchestrator while EUVD lists Gateways, so the exact affected component should be confirmed against HPE advisory hpesbnw05135en_us. No public exploit identified at time of analysis and no CISA KEV entry, but the unauthenticated, network-reachable attack path and total confidentiality, integrity, and availability impact make this a top-priority exposure wherever the management API is internet-facing.
Information disclosure in the HPE Aruba EdgeConnect SD-WAN Orchestrator allows a remote attacker holding only a valid read-only account to retrieve sensitive configuration data, including third-party API tokens and credentials, by sending a specially crafted request to the cache synchronization endpoint. The vendor-supplied score of 9.9 reflects a scope-changed vector with high confidentiality and integrity impact, whereas independent reassessment places the realistic impact at confidentiality-only (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N), because the flaw leaks data rather than altering system state. No CISA KEV entry and no public exploit code were identified at time of analysis, so the practical risk scales with how broadly low-privilege accounts are provisioned and whether the Orchestrator management interface is reachable from untrusted networks.
Privilege escalation in HPE Networking EdgeConnect SD-WAN Orchestrator (builds 9.4.0 through 9.4.10, 9.5.0 through 9.5.8, 9.6.0 through 9.6.3, and 9.7.0) allows an authenticated, low-privileged user of the Orchestrator API to elevate themselves to an administrative role and take full control of the SD-WAN management plane. The issue is network-reachable, low complexity, and needs no user interaction (CVSS 3.1 AV:N/AC:L/PR:L/UI:N with high confidentiality, integrity and availability impact), but it is not exploitable before authentication, so the realistic attack surface is limited to deployments that hand out Orchestrator accounts - multi-tenant, self-service, or otherwise heavily populated role models, and far less so to single-admin environments. No public exploit code has been identified at time of analysis and the issue is not listed as actively exploited (no CISA KEV entry); the vendor rates it 9.9 with a scope change, while our independent assessment agrees on the impact metrics but scores it without a scope change.
Privilege escalation in the HPE Networking EdgeConnect SD-WAN Orchestrator API allows a remote, low-privileged but authenticated user to raise their permissions to administrative level, resulting in complete compromise of the management plane. Only holders of a valid low-privilege API account with network reachability to the API can trigger it (CVSS:3.1/AV:N/AC:L/PR:L/UI:N), so the practical risk depends on how API accounts are provisioned and whether the management interface is segmented away from untrusted networks. Our assessment scores the issue as scope-unchanged (S:U) rather than the 9.9 / S:C vendor figure, which makes this a genuine high-priority issue rather than a CVSS-inflated one; no public exploit code has been identified at time of analysis, and the CVE is not in CISA KEV. Note that the affected version data names EdgeConnect SD-WAN Gateways while the description names the Orchestrator, so the exact affected component should be confirmed against the HPE advisory.
Denial of service with a limited information-disclosure component affects HPE networking devices, where an attacker positioned on an adjacent network segment can degrade availability severely (A:H) and potentially read a small amount of data (C:L) without authentication (PR:N) or user interaction (UI:N). The 7.1 severity is moderated in practice by the adjacency precondition (AV:A), which confines realistic exposure to insiders, on-path attackers, or hosts on an already-compromised Layer-2 segment rather than arbitrary internet clients. No CVE description was supplied and no public exploit code has been identified at time of analysis, so the specific vulnerable feature, protocol and affected models must be confirmed against HPE bulletin hpesbnw05162en_us.
Information disclosure in HPE networking products (CVSS 7.1) could let an unauthenticated attacker with adjacent-network access expose or affect sensitive data when a legitimate user is induced to perform an action, though a high-complexity precondition limits reliable exploitation. The affected models, firmware branches, and vulnerable feature are not specified in the available data; HPE bulletin hpesbnw05162en_us is the authoritative reference for scope and fixes. No public exploit code is identified at time of analysis, and the assessed vector rates confidentiality, integrity, and availability impact as High.
Adjacent-network attackers can cause high availability impact and minor integrity changes on HPE networking devices through CVE-2026-95710, which carries a CVSS 3.1 base score of 7.1. The vector (AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H) means an attacker on the same Layer-2 segment or a logically adjacent network needs no credentials and no user interaction, and the flaw is not reachable from the open internet without first reaching that segment. No public exploit code or CISA KEV entry was identified at time of analysis, and the trigger itself is not described in the available sources.
High-severity network-reachable flaw in HPE networking products can let attackers who already hold high-level privileges affect confidentiality, integrity, and availability. The exact affected models, firmware versions, and triggering feature are not described in the available sources; HPE bulletin hpesbnw05162en_us is the authoritative reference. No public exploit identified at time of analysis.
High-privilege attackers can achieve full confidentiality, integrity, and availability impact on affected HPE networking devices over the network, according to the CVSS 3.1 vector (7.2) with PR:H, AC:L, and UI:N. The high-privilege prerequisite excludes unauthenticated and low-privilege actors, but an already-authenticated administrator can reach the flaw without user interaction. No public exploit has been identified at time of analysis, and the exact product, versions, and trigger are not described in the supplied sources; HPE bulletin hpesbnw05162en_us should be consulted for scope.
An authenticated administrator of an HPE networking product can reach a low-complexity, network-exposed flaw and achieve full confidentiality, integrity and availability impact on the affected component, according to an HPE security bulletin (document HPESBNW05162) scored at CVSS 3.1 base 7.2. The vector AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H confirms the issue is remotely reachable with no user interaction, but the high-privilege prerequisite (PR:H) means only an attacker who already holds an administrative or otherwise privileged account on the device can exploit it, so the realistic exposure is an insider, a compromised administrative credential, or a post-exploitation step, not anonymous internet attack. No public exploit code or proof-of-concept is referenced in the supplied sources, and the specific affected product, version, feature and protocol are not described in the available data.
Administrative users of an HPE networking product can abuse existing high privileges over the network to achieve full confidentiality, integrity, and availability impact under CVE-2026-79956 (CVSS 7.2). The flaw is remotely reachable with low complexity and no user interaction, but the PR:H vector means only attackers who already hold administrative access can exploit it, making insider or post-compromise abuse the realistic path. No public exploit was identified at time of analysis, and the HPE advisory is the primary source because no description or CWE was supplied.
Information disclosure in HPE networking products, tracked as CVE-2026-79891, can expose sensitive data to remote unauthenticated attackers when a high-complexity condition outside their direct control is satisfied; the CVE record is scored 8.1, while the independent assessment limits impact to confidentiality only. The affected product family, versions, feature, and exact prerequisite are not exposed in the supplied data, and the only vendor pointer is HPE security bulletin hpesbnw05162en_us. No public exploit was identified at time of analysis, and no CISA KEV status is present.
Information disclosure in HPE Networking products (CVE-2026-79890) has a CVSS 3.1 base score of 8.1; the assessed vector AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H describes remote, unauthenticated exploitation with no user interaction, while high attack complexity means success depends on conditions outside the attacker's full control. The affected HPE product, version range, and required configuration are not described in the available sources and must be confirmed from HPE bulletin hpesbnw05162en_us, and the tag only classifies the issue as Information Disclosure. No public exploit identified at time of analysis, and the vuln.today priority label is this_week; signals are mixed and the underlying data is thin.
An 8.1-severity remote flaw (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) affects an HPE networking product identified only through HPE security bulletin hpesbnw05162en_us; the specific product and version ranges are not present in the supplied data. Scoring combines full impact on confidentiality, integrity and availability with network reachability, no privileges and no user interaction, but high attack complexity means a condition outside the attacker's control must hold before exploitation succeeds, and that prerequisite is not described in any available source. No public exploit code and no confirmed active exploitation (CISA KEV) are associated with this record, and the only cited reference is the HPE bulletin itself; the vuln.today triage label is this_week, so this should be scheduled within the current patch cycle rather than treated as an emergency. Note the supplied tag reads "Information Disclosure" while the assessed vector claims high integrity and availability impact - that discrepancy is unresolved in the available data.
HPE has published advisory hpesbnw05162en_us for a network-reachable flaw tracked as CVE-2026-79887 that, per its CVSS 3.1 vector (8.1 High), can fully compromise confidentiality, integrity, and availability of the affected system. The specific product, version range, CWE class, and the precondition implied by the high attack complexity (AC:H) are not stated in the available input, so the exact feature or configuration an attacker must arrange remains unconfirmed and must be read from the HPE advisory. No CISA KEV listing, no public exploit code, and no EPSS score were supplied at time of analysis; the single-source tag labels the issue 'Information Disclosure', which is narrower than the total-impact vector and should be reconciled against the vendor advisory. Prioritization signal from vuln.today places this in the 'this_week' queue rather than act_now or emergency.
HPE networking products are affected by a remotely reachable, unauthenticated flaw rated CVSS 8.2 (AV:N/AC:L/PR:N/UI:N, C:N/I:L/A:H), where the dominant risk is loss of availability with a limited integrity impact rather than the exposure of data. The single supplied source - HPE security bulletin hpesbnw05162en_us - is the only authoritative record of which platforms and firmware revisions are in scope, because no CVE description, CPE mapping, or version range was included in the intelligence feed. No public exploit code or PoC reference was identified at time of analysis, and the issue has not been added to CISA KEV; it carries a this_week priority label, so remediation should be scheduled within the current patching cycle rather than treated as an emergency.
Information disclosure in HPE networking devices allows unauthenticated attackers on the same adjacent network segment to obtain high-confidentiality data, with the CVSS 3.1 base score of 8.2 reflecting changed scope, no integrity impact, and low availability impact. The exact affected models, firmware versions, and trigger conditions are not described in the available sources; HPE bulletin hpesbnw05162en_us is the sole reference for scope and remediation. No public exploit code was identified at time of analysis.
Information disclosure in HPE network devices, with the exact affected model and firmware not identified in the supplied data, allows attackers on an adjacent network segment to read sensitive data and cause limited integrity and availability impact without authentication or user interaction. The CVSS 3.1 score is 8.3, with the vector requiring same-segment access (AV:A) rather than internet-wide reachability, low attack complexity, no privileges, and no user interaction. No public exploit or CISA KEV entry is identified at time of analysis, and the specific triggering feature is not described in the available sources.
Information disclosure affecting an HPE product line that has not been named in the supplied data can be triggered by an attacker positioned on the adjacent network, with the assessed vector (CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H, 8.3) indicating high confidentiality, integrity and availability impact that crosses a security scope boundary. No authentication or user interaction is required, but high attack complexity means success depends on conditions outside the attacker's direct control, and exposure is confined to the same broadcast domain or a logically adjacent segment rather than the public Internet. No public exploit code has been identified at time of analysis and there is no CISA KEV entry; the report originates from HPE's own security alert channel and priority guidance places remediation in this week's window, yet no CVE description, CWE mapping, CPE inventory, or fixed version has been supplied, leaving HPE bulletin hpesbnw05162en_us as the only authoritative reference.
CVE-2026-79881 is a high-severity (CVSS 8.3) network-reachable flaw in an HPE product, documented only through the vendor bulletin referenced as hpesbnw05162en_us, which is the identifier format HPE uses for its networking/Aruba security bulletins; the specific product, version range and trigger are not stated in the supplied data. Per the assessed vector (AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H), no prior authentication is needed, but successful exploitation requires the target user to perform an action and depends on high-complexity conditions that are not fully under the attacker's control, with a scope change implying impact beyond the initially vulnerable component. Intelligence tags the issue as Information Disclosure, which sits awkwardly with the vector's high confidentiality, integrity and availability impacts - that inconsistency, combined with the absence of a description or CWE, means the real-world impact cannot be verified from the available sources; no public exploit has been identified at time of analysis and there is no CISA KEV entry. The vulnerability is queued under a 'this_week' priority label rather than an emergency/act-now designation.
HPE networking equipment is affected by a high-severity flaw (CVSS 3.1 base 8.7) that a privileged, authenticated attacker can reach over the network with no user interaction, resulting in high integrity and availability impact that extends beyond the vulnerable component itself (S:C) while leaving confidentiality unaffected (C:N). Only attackers who already hold high privileges (PR:H) on the affected product can realistically trigger it, so exposure is concentrated among insiders and adversaries who have already established a privileged foothold rather than unauthenticated internet scanners. No public exploit code has been identified at time of analysis and the issue is not in CISA KEV; HPE has published an advisory under hpesbnw05162en_us, and the vendor's own notification lists the issue as an information-disclosure-class concern.
Unauthenticated attackers positioned on an adjacent network segment can compromise an HPE networking device with high impact to confidentiality, integrity, and availability, scored CVSS 3.1 8.8 (AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). The affected product line, feature, protocol, and version range are not stated in the supplied data, which contains no description and only a single HPE advisory reference (hpesbnw05162en_us); the one limiting prerequisite confirmed by the vector is network adjacency, meaning the attacker must share an L2 broadcast domain or logically adjacent network rather than reaching the device from the open internet. No public exploit code or KEV entry is indicated at time of analysis, the priority label is this_week, and no vendor-released fix version is specified in the available intelligence.
An unauthenticated, low-complexity flaw in HPE networking equipment (reported to HPE PSIRT under advisory hpesbnw05162en_us) allows an attacker positioned on the same Layer-2 segment, VLAN, or directly-connected local network to achieve high confidentiality, integrity, and availability impact, per the assessed CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H vector (base 8.8). No CVE description or CWE was published, so the specific feature, protocol, or configuration that must be reached to trigger the flaw is not identified in the available sources, and the 'Information Disclosure' tag is narrower than the assessed impact triad. No public exploit code or CISA KEV entry is present in the supplied intelligence, and the vulnerability is not reachable from a routable internet path - the adjacency requirement is the primary limiting factor. The vuln.today decision label places remediation in the 'this_week' queue.
HPE networking devices are affected by a CVSS 9.3 flaw that an unauthenticated attacker on an adjacent network can trigger without user interaction, producing high confidentiality and availability impact while integrity impact is rated none; the supplied data does not name the affected feature, protocol, or trigger condition. The independent assessment identifies adjacent-network reachability of the HPE device as the key gating prerequisite, and the vuln.today decision label is act_now. No KEV listing or public exploit reference is present, so no public exploit is identified at time of analysis, and the overall signals remain mixed and incomplete.
Affected HPE devices allow adjacent-network attackers to achieve high confidentiality and integrity impact without authentication or user interaction, per the assessed vector CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N; the exact product line, models, and software versions are not identified in the supplied data. The vuln.today decision label is act_now, but no CISA KEV entry or public exploit reference is present in the supplied intelligence, and no public exploit was identified at time of analysis. Security teams should treat the issue as high severity for devices reachable from Layer 2/adjacent segments while confirming affected product details through the HPE advisory.
An unauthenticated, low-complexity security flaw affects an as-yet-unnamed HPE product documented in HPE security bulletin hpesbnw05162, carrying a base CVSS 3.1 score of 9.3 (AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N) and triaged as act_now. The only barrier to exploitation is network position: an attacker must sit on an adjacent Layer 2 segment, broadcast domain, or directly connected logical network, after which no credentials or user interaction are required and impact extends past the vulnerable component to a separate security authority with high confidentiality and integrity consequences. No public exploit code or proof-of-concept reference was identified at time of analysis, and the vulnerability is not listed as confirmed actively exploited (CISA KEV); the specific triggering feature, protocol, or configuration is not described in the available sources, and no CWE has been assigned.
Unauthenticated attackers positioned on the same adjacent network segment can both read and modify data on affected HPE networking devices, according to CVE-2026-79873 (CVSS 3.1 base 9.3, AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N). The flaw requires no credentials and no user interaction and changes scope, meaning the attacker's control can extend beyond the vulnerable component, but the attack path is confined to the local LAN, VLAN, wireless, or management segment rather than being reachable from the open internet. No description has been published and no public exploit code has been identified at time of analysis; the vulnerability is not in CISA KEV, and the accompanying HPE advisory (hpesbnw05162en_us) is the authoritative source for affected models, trigger conditions, and fixes, which the reporting feed has tagged as involving information disclosure.
A critical-severity (CVSS 9.4) flaw affects an as-yet-unnamed HPE networking product, exposed through a network-reachable interface that remote attackers can reach without authentication or user interaction (AV:N/AC:L/PR:N/UI:N), with high confidentiality and integrity impact and a lesser availability impact. The only public reference is HPE advisory hpesbnw05162en_us, and no CVE description, CWE classification, or CPE data was supplied, so the affected product family, version ranges, and the specific interface involved remain unconfirmed. Third-party triage assigns this an act_now priority, but no public exploit code and no CISA KEV entry are associated with the record at time of analysis, so the urgency rests on the severity vector and the vendor's own security-alert notification rather than on observed exploitation.
An attacker positioned on an adjacent network can achieve high confidentiality, integrity and availability impact against an affected HPE networking device, reflected in a 9.6 CVSS base score from the vector AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H. No authentication and no user interaction are required once the attacker is on the same Layer-2 segment, VLAN or broadcast domain, and the scope-change metric means the compromise can affect resources beyond the vulnerable component itself; the limiting factor is purely the adjacency requirement, so arbitrary internet-side attackers are not in the threat model. No public exploit code has been identified at time of analysis, EPSS and KEV data were not supplied, and the single reference is an HPE support advisory; the vulnerable feature or protocol and the exact trigger are not described in the available sources.
Full-scope confidentiality, integrity, and availability compromise of affected HPE networking devices is possible for an unauthenticated attacker positioned on the same adjacent network (CVSS 9.6, AV:A/AC:L/PR:N/UI:N/S:C). The CVE record supplies no description, CWE, CPE, patch version, KEV status, or exploit reference, so the specific feature and affected models cannot be confirmed from the provided data; the HPE bulletin is the only source carrying product-level detail. No public exploit identified at time of analysis, but the act_now priority label and changed-scope high-impact vector justify urgent validation against that bulletin.
High-severity (CVSS 9.6) compromise of HPE networking devices is possible from an adjacent-network position: an unauthenticated attacker on the same LAN segment, VLAN, or directly attached network can trigger the flaw with low complexity and no user interaction, and the changed-scope impact is rated high for confidentiality, integrity, and availability. The source tag labels this as Information Disclosure, while the assessed vector also scores high integrity and availability impact; the specific triggering feature or protocol is not described in the supplied sources. HPE's bulletin is the sole reference, no public exploit is identified at time of analysis, and the vuln.today priority is act_now.
HPE networking products are affected by a CVSS 9.6 scope-changing flaw (CVE-2026-79867) tagged as information disclosure but assessed with high confidentiality, integrity, and availability impact. Exploitation requires adjacent-network positioning with no authentication and no user interaction, while affected models and firmware versions are not enumerated in the supplied data. The priority label is act_now; no CISA KEV entry or public exploit reference was supplied, so no public exploit is identified at time of analysis.
A critical-severity (CVSS 9.6) unauthenticated flaw affects an unspecified HPE product, reported directly to the vendor by security-alert@hpe.com and tracked in HPE advisory hpesbnw05162en_us. An attacker positioned on an adjacent network segment (same broadcast/L2 domain, VLAN, or wireless network) can trigger it without credentials or user interaction, resulting in scope-changed high impact to confidentiality, integrity, and availability. The vuln.today Decision label is act_now; because no CVE description was published, the specific triggering feature, protocol, and exact affected versions must be taken from the HPE advisory, and no public exploit code or CISA KEV entry is indicated in the available data.
HPE networking devices are exposed to a critical, unauthenticated attack from an adjacent network position, with the assessed CVSS 3.1 vector (AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) indicating low-complexity exploitation that can produce high confidentiality, integrity, and availability impact and may extend to other systems through changed scope. HPE's own security team reported the issue via advisory hpesbnw05162en_us, and the vuln.today decision label is act_now. No CISA KEV entry or public exploit reference appears in the supplied intelligence, so no public exploit is identified at time of analysis; the supplied tag says Information Disclosure, but the assessed vector indicates impacts well beyond confidentiality alone.
Unauthenticated, network-reachable exploitation of an HPE networking product carries a CVSS 3.1 score of 9.8 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), meaning an attacker with only network access could achieve high confidentiality, integrity and availability impact without credentials or user interaction. The only source in the supplied intelligence is the HPE security bulletin hpesbnw05162en_us; no CVE description, CWE, CPE, affected version list or fixed-version information was provided, so the specific vulnerable component and the trigger conditions are not described in the available sources. The vuln.today decision label is act_now, and no KEV listing or public exploit code was identified at time of analysis, though the bulletin itself could not be retrieved to confirm either signal. The supplied tag reads 'Information Disclosure', which is narrower than the assessed high impact on all three security pillars and should not be relied on as a description of scope.
HPE products covered by Security Bulletin hpesbnw05162 carry a critical-severity (CVSS 9.8) flaw reachable over the network, and vulnerability intelligence flags it as an act-now item, yet the affected component, configuration, and version range cannot be named from the supplied data. The CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U vector with C:H/I:H/A:H means exploitation would require only network reachability to the affected service, with no authentication and no user interaction, against whatever deployment is ultimately confirmed applicable. The record is tagged Information Disclosure, which sits awkwardly against a vector scoring full integrity and availability impact, so the actual impact class should be confirmed from the bulletin before it is relied upon. No public exploit code has been identified at time of analysis and the CVE is not listed in CISA KEV, so no confirmed active exploitation exists; the trigger itself is not described in the available sources.
HPE networking products are affected by a high-severity issue (CVSS 9.8) tracked as CVE-2026-79857, with a remote, unauthenticated vector (AV:N/AC:L/PR:N/UI:N) and high confidentiality, integrity, and availability impact. The CVE record contains no description, CWE, CPE, or version data, and the supplied tag labels it as information disclosure; the exact feature and affected configurations are not described in the available sources. No KEV designation or public exploit code is present in the supplied intelligence, so no public exploit was identified at time of analysis, but the vuln.today decision label is act_now and the HPE advisory hpesbnw05162en_us is the authoritative source for scope and fixes.
A critical-severity flaw (CVSS 9.8) affects an unspecified HPE product per an HPE security advisory (hpesbnw05162en_us), allowing network-reachable, low-complexity attacks that require no authentication or user interaction and can fully compromise confidentiality, integrity, and availability. The available intelligence contains no CVE description, no CWE classification, and no product or version detail, so the precise vulnerable component and trigger cannot be confirmed; the single NVD reference resolves to the HPE support advisory, which must be consulted for the authoritative affected-product list. No public exploit or active-exploitation reporting is included in the supplied data, but the internal decision label is act_now, so treat remediation as immediate and verify exposure against the vendor advisory before assuming any deployment is unaffected.
Unauthenticated remote compromise of HPE networking products is described by a maximum-severity CVSS 3.1 score of 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), a profile that implies full loss of confidentiality, integrity and availability from a network-reachable position with no privileges and no user interaction. The only substantive source is the HPE Security Bulletin hpesbnw05162en_us; the CVE record itself carries no description, no CWE mapping and no CPE data, so the vulnerable service, required configuration and affected version range cannot be confirmed from the supplied material. No CISA KEV entry and no public exploit code were identified at time of analysis, although the item is triaged act_now; the supplier-supplied tag reads 'Information Disclosure', which may point to a narrower real-world impact than the full-CIA vector suggests, and that discrepancy is unverified.
Remote, unauthenticated exploitation of an HPE networking service carries a vendor-scored CVSS 9.8 critical impact: low-complexity network access with no user interaction can affect confidentiality, integrity and availability at high severity. The supplied intelligence provides no CVE description, CWE, CPE or version range, so the exact product feature, configuration and trigger remain unconfirmed and must be established from HPE bulletin hpesbnw05162en_us. An 'Information Disclosure' tag is the only mechanism clue; no CISA KEV status is included and no public exploit identified at time of analysis, while the vuln.today decision is act_now.
HPE networking equipment carries a maximum-severity CVSS 9.8 rating under a CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H vector, meaning a network-reachable attacker without credentials or user interaction could fully compromise confidentiality, integrity and availability. The CVE record itself ships with no description, no CWE and no CPE data, and the only reference is an HPE support document (hpesbnw05162en_us), so the specific product line, firmware branch, exposed protocol and version range cannot be confirmed from the available sources. No public exploit code has been identified at time of analysis and the flaw is not in CISA KEV, yet the vuln.today priority label is act_now - urgency signals therefore conflict with the absence of confirmed exploitation activity, and the HPE advisory should be treated as the authoritative source before scoping exposure.
Remote, unauthenticated attackers can achieve full confidentiality, integrity, and availability impact against an affected HPE networking product, per a CVSS 3.1 base score of 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). The specific vulnerable component, protocol, and affected version range are not described in the available sources; HPE published only a support bulletin (hpesbnw05162en_us) and no CVE description or CWE mapping was supplied, and the record carries an Information Disclosure tag that is difficult to reconcile with the full impact triad. No CISA KEV listing, no public exploit code, and no EPSS score were provided, but the vuln.today priority decision is act_now, so treat exposure as urgent pending confirmation from the HPE bulletin.
HPE security bulletin hpesbnw05162en_us documents a maximum-severity (CVSS 10.0) exposure in an HPE product that is not named in the available data, so the specific affected platform and version range remain unresolved. The assessed vector describes unauthenticated, network-reachable exploitation at low complexity with no user interaction and a changed scope, meaning impact is judged capable of reaching beyond the vulnerable component to give high confidentiality, integrity and availability loss. A single source tag labels the issue as information disclosure, which does not fully reconcile with the High integrity and availability ratings in the vector; no CVE description, CWE, CPE data, KEV entry or public exploit reference was supplied, so active exploitation is not confirmed and no public exploit was identified at time of analysis. The vuln.today priority decision is act_now, driven by the maximum severity score rather than by corroborated in-the-wild activity.
A maximum-severity, network-reachable flaw (CVSS 3.1 base 10.0) in an as-yet-unnamed HPE product allows remote attackers to achieve high confidentiality, integrity and availability impact across a scope boundary without authentication or user interaction. The affected product line, feature, protocol and version range are not stated in the available data; the only authoritative source is HPE security bulletin hpesbnw05162en_us, which must be consulted to identify the exact product and fixed build. No public exploit code has been identified at time of analysis and the CVE is not listed in CISA KEV, but the vulnerability is tagged 'Information Disclosure' while the assessed vector also scores high integrity and availability impact, so the true impact profile should be confirmed from the vendor bulletin. Vuln.today priority is act_now based on the assessed vector.
Unauthenticated network attackers can potentially achieve high confidentiality, integrity, and availability impact against an HPE networking product, based on the supplied CVSS 3.1 vector scoring 10.0 with scope change. The CVE has no description and no published affected version range; the HPE Security Bulletin hpesbnw05162en_us is the only reference, and the exact product feature, deployment mode, and trigger remain unverified. No public exploit is identified at time of analysis.
HPE advisory hpesbnw05162en_us covers a product flaw carrying a CVSS 3.1 base score of 10.0 (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H), meaning remote, unauthenticated access with no user interaction and full confidentiality, integrity, and availability impact across a scope change. The affected product, versions, and trigger are not stated in the supplied data and must be confirmed from the bulletin; no CISA KEV entry was supplied and no public exploit was identified at time of analysis, though the vuln.today decision label is act_now.
Unauthenticated remote attack against an HPE networking product carries the vendor's maximum CVSS 3.1 base score of 10.0, reflecting network reachability with low complexity, no privileges and no user interaction, a scope change, and high confidentiality, integrity and availability impact. The HPE bulletin referenced as hpesbnw05162en_us is the only source supplied: no description, CWE, CPE, version range or fixed-version information was provided, so the specific affected product line, exposed interface and trigger remain unconfirmed. No public exploit code was identified at time of analysis, and CISA KEV status is not indicated, but the single-source nature of this record means the product and version scope must be confirmed directly against the advisory before exposure can be judged.
Information disclosure in an unspecified HPE Networking product is tracked as CVE-2026-79844, but the supplied record contains no CVE description, CWE, CPE, or affected-version data, so the exact component at risk is unconfirmed. The independent assessment rates the issue as network-reachable, low-complexity, unauthenticated, and no-interaction, with high confidentiality impact and no integrity or availability impact; the source's 10.0 score is broader and is not adopted by that assessment. vuln.today assigns an act_now priority, while no CISA KEV status is present and no public exploit identified at time of analysis.
Authenticated remote code execution in HPE Networking ClearPass Policy Manager allows an attacker who already holds high-privilege administrative access to the management interface to run arbitrary commands on the underlying operating system, potentially leading to full host compromise. The flaw is remotely reachable (AV:N), requires no user interaction (UI:N) and has low attack complexity (AC:L), but its severity is bounded by the CVSS PR:H prerequisite - only administrator-level accounts can trigger it, so exploitation realistically depends on credential compromise, insider access, or chaining from a separate authentication or privilege-escalation weakness. No public exploit code has been identified at time of analysis and the issue is not confirmed actively exploited (no CISA KEV listing); with a base score of 7.2, this is assessed as a moderate-priority issue rather than a top-tier emergency, though the confidentiality, integrity and availability impact on a successful hit is high.
Buffer overflow in the HPE Aruba ClearPass Policy Manager OnGuard agent lets an authenticated local user execute arbitrary code with elevated privileges or crash the agent, disrupting endpoint posture enforcement. Exploitation requires an existing low-privileged session on the endpoint where the agent is installed and running and cannot be triggered remotely, since the attack vector is local (AV:L, PR:L) while the privilege gain is High across confidentiality, integrity, and availability. HPE has published a vendor advisory, but no public exploit code has been identified at time of analysis; at CVSS 7.8 this is a credible but not emergency-level priority, most relevant to hosts where unprivileged local users and the OnGuard agent coexist.
Missing integrity verification in the HPE Networking ClearPass Policy Manager client agent allows remote unauthenticated attackers to introduce untrusted code that the agent then executes on the enrolled client system, giving full code execution on that endpoint. Only systems running the vulnerable client agent (for example OnGuard deployments) are exposed; the ClearPass server itself is not the target of this flaw, and organizations that do not deploy the agent are unaffected. The input CVSS of 9.8 reflects the worst case, but the authoritative independent assessment scores it AV:N/AC:H, because the attacker must first be able to supply or substitute the code the agent consumes - typically a man-in-the-middle position on the agent's communication or update channel, or control of a source the agent implicitly trusts. There is no evidence of confirmed active exploitation (not in CISA KEV) and no public exploit code identified at time of analysis, so the practical risk is conditional on the attacker obtaining that network positioning or trusted-source access.
Stored cross-site scripting in the web-based management interface of Aruba/HPE ClearPass Policy Manager allows a remote attacker to plant script that is stored by the application and later executes in the browser of an administrative user who views the affected page. Consistent with our independent assessment (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N), the injection step requires no authentication, but the payload only fires after an authenticated administrator interacts with the affected view, yielding high confidentiality and integrity impact within that administrative session; the vendor/NVD vector rates it 8.8 under a slightly different scope/impact model. No public exploit code and no evidence of active exploitation were identified at time of analysis (CVE-2026-79799 is not in CISA KEV, and no EPSS score was supplied), so this is a credible, moderately high priority for organizations running ClearPass - particularly those that expose the management interface beyond an isolated management network or trusted admin VLAN.
Authentication bypass in HPE Aruba Networking ClearPass Policy Manager allows an unauthenticated remote attacker to circumvent existing authentication controls on the affected interface and gain unauthorized access to the system, rated CVSS v3.1 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). No public exploit code was identified and the vulnerability is not confirmed actively exploited (no CISA KEV), but the assessed vector shows no credentials, no user interaction and no special configuration required, implying default-configuration exploitability where the interface is reachable. Independent assessment concludes the available signals point to a genuine high-priority issue rather than a CVSS-inflated non-issue; the exact affected versions and the specific exposed service are not named in the available HPE bulletin, so exposure of the interface is the primary risk-limiting factor.
Unauthenticated SQL injection in HPE Aruba Networking ClearPass Policy Manager allows a remote attacker who can reach the affected interface to inject arbitrary SQL into the application's database layer, with successful exploitation enabling execution of arbitrary database commands. The flaw carries a CVSS 3.1 base score of 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), meaning no credentials or user interaction are required and the confidentiality, integrity, and availability impact is total; any ClearPass instance whose management/web service is reachable from an untrusted network is directly at risk. No public exploit code has been identified at time of analysis and the flaw is not in CISA's KEV catalog, but the pre-authentication, network-reachable profile and the database-command execution outcome make this a high-priority item for exposure reduction and patching per the HPE advisory.
Unauthenticated remote code execution is the exposure created by a format string flaw in a service interface of HPE Networking ClearPass Policy Manager: an attacker who can reach the vulnerable interface can supply crafted input that corrupts process memory and, on successful exploitation, execute arbitrary code in the context of the affected service, with high confidentiality, integrity and availability impact (CVSS 3.1 9.8, AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). No public exploit code or confirmed active exploitation is identified at the time of analysis, and the report originates from HPE's own security-alert address, but the absence of authentication, user interaction or attack complexity means exploitation is straightforward for any attacker with network reachability to the interface. The practical limiting factor is exposure: ClearPass management and service interfaces are normally confined to segmented management networks, so internet-facing or user-network-reachable deployments carry the greatest immediate risk.
Authentication bypass in HPE Networking ClearPass Policy Manager allows an unauthenticated remote attacker to circumvent existing authentication controls on the product's web-based management and API interfaces and obtain administrative access to the affected system. The flaw carries a vendor-assessed CVSS of 9.8 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), meaning no credentials, no user interaction, and no special configuration are required - only network reachability to a management or API endpoint, which in many deployments is restricted to management VLANs or admin networks, making exposure control the primary practical limiting factor. Our assessment rates this a genuine top-priority vulnerability rather than a high-CVSS-but-low-real-risk case; no public exploit code and no confirmed active exploitation were identified at time of analysis, and ClearPass is a network access control / policy enforcement platform, so administrative compromise can extend impact well beyond the appliance itself.
Missing integrity verification in the HPE ClearPass Policy Manager OnGuard agent allows an unauthenticated, remote attacker to execute arbitrary code with the agent's elevated privileges on managed endpoints. In practice, exploitation requires the attacker to intercept, modify, or impersonate the data/update channel the agent trusts (e.g., adversary-in-the-middle or rogue server), meaning the vendor's low-complexity rating (CVSS 9.8) is tempered by this positioning requirement. No public exploit code has been identified at time of analysis, and there is no indication of active exploitation (not in CISA KEV).
Unauthenticated remote code execution in the web interface of HPE Networking ClearPass Policy Manager allows an attacker who can reach that interface over the network to run arbitrary code on the appliance. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, 9.8) confirms no authentication, no user interaction, and low attack complexity, with full confidentiality, integrity, and availability impact - a genuine high-priority vulnerability rather than a high-CVSS-but-low-risk artifact. No public exploit identified at time of analysis; the practical limiting factor is network exposure of the ClearPass web interface, so deployments reachable from the internet or broad internal networks are at direct risk while those restricted to isolated management networks or behind VPN/firewall controls are substantially less exposed.
Command injection in HPE Networking Instant ON firmware versions up to and including 3.4.1.0 allows an authenticated remote attacker with high (administrator) privileges to execute arbitrary commands on the underlying operating system, resulting in full loss of confidentiality, integrity, and availability (CVSS 7.2). The flaw is network-reachable (AV:N) with low complexity (AC:L) and requires no user interaction (UI:N), but exploitation requires prior admin-level authentication (PR:H) to the management interface. No public exploit code has been identified at time of analysis, and the issue is not listed in CISA KEV.
An authentication bypass in the API endpoint of HPE Networking Instant ON (affected versions 0.0.0.0 through 3.4.1.0) allows an unauthenticated, network-positioned attacker to circumvent network access controls and reach restricted networks without credentials or user interaction. The vendor-published CVSS 3.1 base score is 8.1 (High), but our independent assessment retains AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N because exploitation is gated by preconditions outside the attacker's control - the vulnerable state is transient and cannot be forced, so success depends on catching a device in that window rather than on attacker skill. There is no indication of active exploitation (no CISA KEV listing in the supplied intelligence) and no public exploit identified at time of analysis, so the practical risk is a genuine but conditionally-gated one rather than an immediately weaponizable remote compromise.
Authentication controls in the management protocol of HPE Networking Instant On access points (firmware ≤3.4.1.0) can be circumvented by an unauthenticated attacker who is adjacent to the device, resulting in a complete bypass of security restrictions and potentially remote code execution with elevated privileges. Exploitation requires only network adjacency - an associated Wi-Fi client, guest-network user, or any host on the same Layer 2 segment - with no credentials, no user interaction, and low attack complexity, which is why the CVSS 3.1 score reaches 9.6. No public exploit code and no confirmed active exploitation were identified at time of analysis, and devices already updated beyond firmware 3.4.1.0 are not affected.
Unauthenticated command injection in the CLI of HPE Networking Instant On access points allows an attacker on the same adjacent network segment - within wireless range or on the same link-layer/LAN - to send specially crafted packets and execute arbitrary commands as a privileged user on the underlying operating system. Any Instant On AP running firmware up to and including 3.4.1.0 in its default configuration is affected, and the scope change (S:C) in the CVSS vector means compromise of the AP can extend into the host OS and anything it can reach. At the time of analysis no public exploit code or active exploitation telemetry has been identified, but the CVSS base of 9.6, the zero-privilege, zero-interaction attack path, and the ease of obtaining adjacent-network access make this a genuinely high-priority, patching-urgent issue rather than a theoretical one. There is no public exploit identified at time of analysis.
Unauthenticated attackers on the same Layer-2/wireless broadcast domain as an HPE Networking Instant On access point can trigger a buffer overflow in an exposed interface and execute arbitrary commands on the device's underlying operating system. Firmware versions at or below 3.4.1.0 are affected, including default configurations, and the CVSS 3.1 base score of 9.6 reflects a scope change (S:C) from the network-facing interface to the AP operating system, with high confidentiality, integrity, and availability impact. The adjacency requirement (AV:A) is the primary limiting factor, confining realistic attackers to associated Wi-Fi clients, hosts on the local LAN, or anyone with physical proximity; no public exploit code and no CISA KEV entry were identified in the provided data, and no EPSS score was supplied, so exploitation is not confirmed as active at time of analysis.
Unauthenticated remote command execution is possible on HPE Networking Instant On access points running firmware version 3.4.1.0 and earlier, due to uncontrolled format string handling in an exposed interface of the device. Per the CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, base 9.8), an attacker who can reach that interface over the network needs no credentials and no user interaction, and successful exploitation can run arbitrary commands on the underlying host, causing denial of service or full compromise. No public exploit code has been identified at time of analysis and the issue is not listed as confirmed actively exploited (CISA KEV), but the low attack complexity and default-configuration reachability make it a genuine high-priority exposure for any Instant On AP whose vulnerable interface is accessible from an untrusted segment.
Unauthenticated remote code execution in HPE Networking Instant On firmware through 3.4.1.0 allows an attacker who can reach the device's affected network interface to exploit a buffer overflow and execute arbitrary code as a privileged user on the underlying host (CVSS 9.8, AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). No public exploit code and no confirmed active exploitation (CISA KEV) were identified at time of analysis, but exploitation requires only network reachability to the exposed interface, so internet-facing or unsegmented Instant On access points and switches carry the greatest exposure. HPE has addressed the flaw in firmware versions above 3.4.1.0.
Root-level remote code execution in HPE Analytics and Location Engine (ALE) can be achieved when an attacker first establishes a man-in-the-middle position on the network path to the appliance's administrative component and an administrator then interacts with that component. The CVSS 7.1 vector (AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) confirms that no authentication is needed once the MitM and user-interaction preconditions are met, and successful exploitation grants root privileges. No public exploit code has been identified at time of analysis, and the provided data does not specify a patched version.
Root-level file system access in HPE Analytics and Location Engine (ALE) can be obtained by an authenticated administrator through the product's maintenance restore function, which processes attacker-supplied restore data with root privileges and permits writes to the host file system (CVSS 3.1 base 7.2 High, AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H). Because the vector requires high privileges (PR:H), the practical attack surface is limited to administrators or adversaries who have already compromised an admin account, though the flaw is network-reachable (AV:N) and needs no user interaction (UI:N). No public exploit code was identified and there is no confirmed active exploitation at time of analysis.
Unauthenticated data injection in HPE's Analytics and Location Engine (ALE) lets any attacker who can reach the ALE service socket send specially crafted input during connection setup and corrupt the data the component handles. The flaw carries a CVSS 3.1 base score of 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) - remote, low complexity, no credentials and no user interaction required, with impact confined to integrity; confidentiality and availability are unaffected. There is no indication of active exploitation (CISA KEV) and no public exploit identified at time of analysis, so the practical risk is driven by exposure: ALE is an internal enterprise WLAN analytics component, and instances whose listening socket is reachable from untrusted or flat network segments carry the greatest risk.
Unauthenticated remote write access to the file system with elevated privileges in HPE Analytics and Location Engine (ALE) lets any attacker who can reach the product's internal administrative component overwrite files as a privileged user, with the potential for full system compromise. The flaw carries a CVSS v3.1 base score of 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), meaning no authentication, no user interaction, and no special privileges are required against a vulnerable instance; the practical constraint is network reachability, since ALE admin interfaces are normally confined to internal management networks rather than exposed to the internet. No public exploit code was identified at time of analysis and the issue is not listed as confirmed actively exploited (CISA KEV), but the combination of an authentication-bypass class defect, a critical severity rating, and privileged file-write impact makes this a genuinely high-priority remediation item wherever ALE is deployed.
Default, hard-coded credentials shipped on several administrative and system accounts in HPE's Analytics and Location Engine (ALE) allow an unauthenticated remote attacker to log straight into the management interface and the underlying operating system, yielding full compromise of the appliance. The flaw carries a CVSS 3.1 base score of 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) because no authentication, user interaction, or special configuration is required - the attacker only needs the known default secrets, which are typically published in advisories or recoverable from firmware - and there is no CISA KEV listing or public exploit code reported at time of analysis. Practical exposure is tempered by deployment context: ALE normally sits inside enterprise WLAN/management networks rather than on the public internet, so real-world risk depends on an attacker already having a foothold or reachability into those internal segments.
Unauthenticated remote denial-of-service in HPE Networking EdgeConnect SD-WAN Gateways (formerly Silver Peak), affecting firmware branches 9.4.x up to 9.4.8.2, 9.5.x up to 9.5.8.1, 9.6.x up to 9.6.3.1, and 9.7.0.0. An attacker who can reach the vulnerable gateway service can exhaust resources (CWE-400, uncontrolled resource consumption), rendering certain services on the appliance unavailable and disrupting SD-WAN connectivity for sites behind the gateway. The CVSS 3.1 score is 7.0 (AV:N/AC:H/PR:N/UI:N), and no public exploit code or CISA KEV listing was identified at time of analysis.
Adjacent-network attackers can crash HPE Networking EdgeConnect SD-WAN Gateways or leak small amounts of uninitialized stack memory by sending crafted traffic to the gateway, affecting unauthenticated devices reachable from the same Layer 2 segment. The flaw (CWE-200) carries a 7.1 CVSS score with the availability impact rated High and confidentiality impact Low, and it spans four maintained release trains from 9.4.0.0 through 9.7.0.0. It is not listed in CISA KEV, no public exploit code was identified in the supplied intelligence, and no EPSS probability was provided, so the immediate risk is driven by network adjacency and gateway exposure rather than confirmed mass exploitation.
A buffer overflow in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways allows an attacker who already holds high-privilege API credentials to execute arbitrary commands as a privileged operating-system user on the gateway appliance. Affected releases span the 9.4.x, 9.5.x, 9.6.x and 9.7.0.0 branches, per ENISA EUVD version ranges. The CVSS 3.1 vector requires PR:H, meaning exploitation is not unauthenticated; no public exploit was identified at time of analysis, and the issue is not listed in CISA KEV.
Authenticated attackers holding administrative access to the management plane of HPE Networking EdgeConnect SD-WAN Gateways can supply crafted input to an affected component and achieve arbitrary command execution as root. The flaw affects multiple released trains — 9.4.x up to 9.4.8.2, 9.5.x up to 9.5.8.1, 9.6.x up to 9.6.3.1, and 9.7.0.0 — with a CVSS base score of 7.2 reflecting the high privilege prerequisite against total loss of confidentiality, integrity, and availability. There is no CISA KEV entry, no EPSS score, and no public exploit code identified at time of analysis, so this is currently a high-impact but credential-gated risk rather than an actively exploited one.
Authenticated attackers who already hold administrative privileges on HPE Aruba EdgeConnect SD-WAN Gateways can supply specially crafted configuration data that overflows a stack buffer in the configuration processing logic, potentially yielding remote code execution as root or crashing the gateway into a denial of service. The flaw affects gateway releases in the 9.4.x (≤9.4.8.2), 9.5.x (≤9.5.8.1), 9.6.x (≤9.6.3.1) and 9.7.0.0 branches per the ENISA EUVD affected-version list, and carries a CVSS 3.1 base score of 7.2 (AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H). No public exploit code, CISA KEV listing or EPSS score was included in the supplied intelligence, so the observed exploitation status is unconfirmed at time of analysis.
Authentication controls protecting the web-based management interface of HPE Aruba EdgeConnect SD-WAN Orchestrator can reportedly be circumvented by a remote actor, allowing escalation to administrative privileges and full compromise of the orchestrator host that manages the SD-WAN fabric. Reported affected releases span EdgeConnect SD-WAN software 9.4.0 through 9.7.0, with no fix version disclosed in the supplied source data. No public exploit code and no CISA KEV entry were identified at time of analysis, and no EPSS score was supplied, so exploitation status is best treated as unconfirmed.
Privilege escalation in the HPE Networking EdgeConnect SD-WAN Orchestrator API lets an attacker who already holds a low-privilege account elevate to root and run arbitrary operating-system commands on the appliance. The flaw is remotely reachable (AV:N) but requires authentication plus a high-complexity exploitation path per the assigned CVSS vector (7.5, AC:H, PR:L). No public exploit code or CISA KEV entry was present in the supplied intelligence, so this is currently a post-authentication hardening priority rather than an actively exploited zero-day.
Unauthenticated remote denial-of-service in HPE Networking EdgeConnect SD-WAN Gateways, where a flaw in the appliance's underlying operating system lets a network-reachable attacker crash or stall an affected service. All four maintained branches are impacted — 9.4.0.0 through 9.4.8.2, 9.5.0.0 through 9.5.8.1, 9.6.0.0 through 9.6.3.1, and 9.7.0.0 — with CVSS 7.5 reflecting a high availability impact and no confidentiality or integrity loss. No public exploit code and no CISA KEV listing were present in the source data at time of analysis, so this is currently a patch-now availability risk rather than a confirmed active campaign.
Unauthenticated remote code execution and denial-of-service in HPE Aruba Networking EdgeConnect SD-WAN Gateways (versions 9.4.0.0–9.4.8.2, 9.5.0.0–9.5.8.1, 9.6.0.0–9.6.3.1, and 9.7.0.0) arise from flawed parsing of malformed or truncated packets in the proxy packet-processing path, where incorrect length arithmetic triggers an integer overflow that can become a memory-corruption (buffer overflow) condition. Successful exploitation can let a network-positioned attacker execute code or crash the gateway, taking down the SD-WAN overlay. The HPE advisory at support.hpe.com confirms affected version ranges, but there is no CISA KEV listing, no EPSS score, and no public exploit code identified at time of analysis, so this is currently a patch-now, watch-for-exploitation item rather than a confirmed active campaign.
Unauthenticated remote attackers can circumvent the authentication controls exposed by the API of HPE Networking EdgeConnect SD-WAN Orchestrator, escalating to administrative privileges and achieving complete compromise of the orchestrator host. The vendor rates this 8.1 (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H), and EUVD maps the affected code lines to EdgeConnect SD-WAN releases 9.4.0 through 9.4.10, 9.5.0 through 9.5.8, 9.6.0 through 9.6.3, and 9.7.0. No CISA KEV listing or public exploit code was identified in the supplied intelligence, and EPSS data was not provided, so the practical exploitation risk rests on the high attack complexity (AC:H) noted in the vendor vector.
A buffer overflow in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways allows an unauthenticated remote attacker to execute arbitrary commands on the underlying host, resulting in full operating-system compromise of the appliance. Multiple maintenance trains are affected — 9.4.0.0 through 9.4.8.2, 9.5.0.0 through 9.5.8.1, 9.6.0.0 through 9.6.3.1, and the 9.7.0.0 release. The vendor's own CVSS rating is 8.1 (AV:N/AC:H/PR:N/UI:N), reflecting that exploitation is unauthenticated but gated by preconditions outside the attacker's control; no public exploit code or CISA KEV listing was identified at time of analysis.
A limited buffer overflow in the network security monitoring component of HPE EdgeConnect SD-WAN Gateways allows an unauthenticated remote attacker to crash the appliance and potentially execute code by driving crafted traffic into the monitoring parser. ENISA EUVD lists four affected release trains: 9.4.0.0 through 9.4.8.2, 9.5.0.0 through 9.5.8.1, 9.6.0.0 through 9.6.3.1, and 9.7.0.0. No CISA KEV entry and no public exploit code were identified at time of analysis, and no EPSS data was supplied with the record.
Incorrect authorization in the EdgeConnect SD-WAN Orchestrator API lets an authenticated remote user with low privileges retrieve sensitive information beyond what their role permits, and that data can potentially be leveraged to reach the SD-WAN network services the orchestrator manages. The vendor HPE/Aruba rates this 8.5 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N), and ENISA EUVD lists affected EdgeConnect SD-WAN Gateway releases in the 9.4.x, 9.5.x, 9.6.x and 9.7.0 lines. No public exploit code exists and the issue is not in CISA KEV at time of analysis; exploitation requires valid low-privilege credentials, which materially narrows the attacker population.
Server-side request forgery in the EdgeConnect SD-WAN Orchestrator API lets any remote user who already holds valid low-privilege credentials redirect server-side fetches to attacker-chosen internal destinations, mapping the internal structure of the Orchestrator host and disclosing sensitive information beyond that user's authorized privilege level. The issue is network-reachable at low attack complexity with no user interaction (CVSS 3.1: AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N, base 8.5), and the scope change reflects the pivot out of the API context into the host/network fabric. No public exploit code was identified at time of analysis and no CISA KEV entry is associated with this CVE; note that the description names the Orchestrator while the ENISA EUVD record lists EdgeConnect SD-WAN Gateway builds 9.4.0 through 9.7.0, so the exact affected component should be confirmed against the HPE advisory before scoping exposure.
Unauthenticated attackers positioned on an adjacent network segment can crash HPE Networking EdgeConnect SD-WAN Gateway appliances by sending crafted traffic, causing a denial of service that the device cannot recover from without manual intervention. All four maintained firmware branches are affected: 9.4.0.0 through 9.4.8.2, 9.5.0.0 through 9.5.8.1, 9.6.0.0 through 9.6.3.1, and 9.7.0.0. The vendor rates this 8.6 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H) and the only publicly indexed advisory is HPE's own security bulletin (hpesbnw05135en_us); no CISA KEV listing, EPSS score, or public proof-of-concept code was present in the supplied intelligence, so active exploitation is unconfirmed.
Low-privilege authenticated attackers can escalate to root on HPE Networking EdgeConnect SD-WAN Gateways by abusing an API endpoint, gaining the ability to run arbitrary operating-system commands. The flaw carries a CVSS base score of 8.8 (AV:N/AC:L/PR:L/UI:N), meaning the attacker needs only valid low-privileged credentials and network reachability to the management API — no user interaction is required. Affected branches span EdgeConnect SD-WAN Gateways 9.4.x through 9.7.0.0; no public exploit code has been identified and the issue is not listed in CISA KEV at time of analysis.
Privilege escalation in the EdgeConnect SD-WAN Gateway API lets a remote, authenticated low-privileged user gain administrative rights on the web-management interface, resulting in complete compromise of the gateway (CVSS 8.8, AV:N/PR:L). Affected branches are 9.4.0.0–9.4.8.2, 9.5.0.0–9.5.8.1, 9.6.0.0–9.6.3.1, and 9.7.0.0. No public exploit code, EPSS score, or CISA KEV listing was provided at time of analysis; exploitation requires a valid low-privileged account and reachability of the management API.
A buffer overflow in the underlying operating system of HPE Aruba Networking EdgeConnect SD-WAN Gateways lets an unauthenticated attacker on an adjacent network segment execute arbitrary code as a privileged OS user, resulting in full compromise of the appliance. Affected branches span the 9.4.x, 9.5.x, 9.6.x and 9.7.0.0 release trains (up to 9.4.8.2, 9.5.8.1, 9.6.3.1 and 9.7.0.0 respectively). The vendor describes exploitation as conditional on preconditions outside the attacker's control, and no public exploit code, EPSS score or CISA KEV entry was present in the supplied intelligence at time of analysis.
Authenticated command injection in the command-line interface of HPE Aruba EdgeConnect SD-WAN Gateways allows an attacker who already holds high-privileged CLI credentials to break out of the appliance shell and execute arbitrary commands on the underlying operating system, resulting in complete compromise of the gateway. The flaw affects the 9.4.x, 9.5.x, 9.6.x and 9.7.x maintenance streams (9.4.0.0–9.4.8.2, 9.5.0.0–9.5.8.1, 9.6.0.0–9.6.3.1 and 9.7.0.0) and carries a vendor-assigned CVSS of 9.1 with a scope change from the CLI component to the host OS. No public exploit code or CISA KEV entry was identified at time of analysis, and no EPSS score was supplied, so the practical priority is driven by exposure of the management CLI rather than by evidence of active exploitation.
Unauthenticated remote code execution affects HPE Networking EdgeConnect SD-WAN Gateways running firmware in the 9.4.x, 9.5.x, 9.6.x, and 9.7.0.0 branches, where a buffer overflow in an underlying operating system service permits a network-reachable attacker to run arbitrary commands and fully compromise the appliance. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, 9.8) and the independent assessment agree that no credentials or user interaction are needed, so the practical limiting factor is whether the vulnerable interface is reachable from an untrusted network. No public exploit code has been identified at time of analysis and the issue has not been confirmed actively exploited (CISA KEV), but the severity, the network-edge placement of these devices, and the credential-free attack path make this a top-priority patch item for exposed gateways.
Unauthenticated remote attackers can bypass authentication controls in the EdgeConnect SD-WAN Orchestrator management API to gain administrative privileges and fully compromise the underlying host, rated 9.8 under CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. Affected builds per the EUVD advisory span EdgeConnect SD-WAN 9.4.0 through 9.4.10, 9.5.0 through 9.5.8, 9.6.0 through 9.6.3, and 9.7.0, although the description attributes the flaw to the Orchestrator while EUVD lists Gateways, so the exact affected component should be confirmed against HPE advisory hpesbnw05135en_us. No public exploit identified at time of analysis and no CISA KEV entry, but the unauthenticated, network-reachable attack path and total confidentiality, integrity, and availability impact make this a top-priority exposure wherever the management API is internet-facing.
Information disclosure in the HPE Aruba EdgeConnect SD-WAN Orchestrator allows a remote attacker holding only a valid read-only account to retrieve sensitive configuration data, including third-party API tokens and credentials, by sending a specially crafted request to the cache synchronization endpoint. The vendor-supplied score of 9.9 reflects a scope-changed vector with high confidentiality and integrity impact, whereas independent reassessment places the realistic impact at confidentiality-only (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N), because the flaw leaks data rather than altering system state. No CISA KEV entry and no public exploit code were identified at time of analysis, so the practical risk scales with how broadly low-privilege accounts are provisioned and whether the Orchestrator management interface is reachable from untrusted networks.
Privilege escalation in HPE Networking EdgeConnect SD-WAN Orchestrator (builds 9.4.0 through 9.4.10, 9.5.0 through 9.5.8, 9.6.0 through 9.6.3, and 9.7.0) allows an authenticated, low-privileged user of the Orchestrator API to elevate themselves to an administrative role and take full control of the SD-WAN management plane. The issue is network-reachable, low complexity, and needs no user interaction (CVSS 3.1 AV:N/AC:L/PR:L/UI:N with high confidentiality, integrity and availability impact), but it is not exploitable before authentication, so the realistic attack surface is limited to deployments that hand out Orchestrator accounts - multi-tenant, self-service, or otherwise heavily populated role models, and far less so to single-admin environments. No public exploit code has been identified at time of analysis and the issue is not listed as actively exploited (no CISA KEV entry); the vendor rates it 9.9 with a scope change, while our independent assessment agrees on the impact metrics but scores it without a scope change.
Privilege escalation in the HPE Networking EdgeConnect SD-WAN Orchestrator API allows a remote, low-privileged but authenticated user to raise their permissions to administrative level, resulting in complete compromise of the management plane. Only holders of a valid low-privilege API account with network reachability to the API can trigger it (CVSS:3.1/AV:N/AC:L/PR:L/UI:N), so the practical risk depends on how API accounts are provisioned and whether the management interface is segmented away from untrusted networks. Our assessment scores the issue as scope-unchanged (S:U) rather than the 9.9 / S:C vendor figure, which makes this a genuine high-priority issue rather than a CVSS-inflated one; no public exploit code has been identified at time of analysis, and the CVE is not in CISA KEV. Note that the affected version data names EdgeConnect SD-WAN Gateways while the description names the Orchestrator, so the exact affected component should be confirmed against the HPE advisory.