18
CVEs
2
Critical
7
High
0
KEV
0
PoC
8
Unpatched C/H
22.2%
Patch Rate
0.1%
Avg EPSS
Severity Breakdown
CRITICAL
2
HIGH
7
MEDIUM
9
LOW
0
Monthly CVE Trend
Affected Products (30)
Integrated Lights Out 5 Firmware
17
Cloudline Cl4100 Gen10 Server Firmware
16
Cloudline Cl5800 Gen9 Server Firmware
16
Cloudline Cl5800 Gen10 Server Firmware
16
Cloudline Cl3100 Gen10 Server Firmware
16
Cloudline Cl5200 Gen9 Server Firmware
16
Baseboard Management Controller
14
Arubaos Cx
13
Insight Remote Support
9
Storeonce System
8
Nimbleos
6
Ntp
6
Hpux Ntp
6
Autopass License Server
5
Oneview Global Dashboard
4
Aruba Networking Private 5g Core
4
Smart Update Manager
4
Superdome Flex Server Firmware
3
Sf300 Firmware
3
Utility Computing Service Meter
3
Hf40C Firmware
3
Hf40 Firmware
3
Hf20 Firmware
3
Ubuntu Linux
3
Hf20H Firmware
3
Hf20C Firmware
3
Sf100 Firmware
3
Hf60 Firmware
3
Arubaos Switch
3
Oneview
3
Top Risky CVEs
| CVE | Summary | Severity | CVSS | EPSS | Priority | Signals |
|---|---|---|---|---|---|---|
| CVE-2026-23600 | Remote authentication bypass in HPE AutoPass License Server (APLS) allows unauthenticated network attackers to circumvent access controls and gain full administrative control over the licensing service, per HPE advisory hpesbgn05003en_us. The flaw (CWE-287, improper authentication) carries a maximum CVSS 4.0 base score of 10.0 with high confidentiality, integrity, and availability impact extending to subsequent systems. No public exploit identified at time of analysis, and the EPSS probability is currently low (0.24%). | CRITICAL | 10.0 | 0.2% | 50 |
No patch
|
| CVE-2026-23813 | Auth bypass in HPE Aruba AOS-CX switch web management. | CRITICAL | 9.8 | 0.1% | 49 |
No patch
|
| CVE-2026-23814 | Authenticated remote attackers can execute arbitrary commands through malformed parameters in AOS-CX CLI commands, achieving remote code execution with high integrity and confidentiality impact. The vulnerability affects low-privileged users on networked systems and requires no user interaction to exploit. No patch is currently available for this command injection flaw. | HIGH | 8.8 | 0.1% | 44 |
No patch
|
| CVE-2026-23595 | Unauthenticated attackers can bypass API authentication in Aruba Networking Private 5G Core to create unauthorized administrative accounts, enabling full system compromise. Successful exploitation grants attackers administrative privileges to modify configurations and access sensitive data within affected deployments. | HIGH | 8.8 | 0.1% | 44 |
|
| CVE-2026-73769 | Remote code execution in HPE Aruba ClearPass Policy Manager (CPPM) allows an authenticated attacker with high-privilege access to the web-based management interface to execute arbitrary commands on the underlying operating system. The attack is network-reachable with no user interaction required beyond obtaining administrator credentials. No public exploit has been identified at time of analysis, but full system compromise is achievable upon successful exploitation. | HIGH | 7.2 | 0.9% | 37 |
No patch
|
| CVE-2026-23815 | Authenticated administrators of AOS-CX Switches can inject arbitrary commands through a custom binary in the CLI, potentially compromising switch integrity and network operations. This high-privilege attack requires valid credentials and direct network access but carries no patch availability, leaving affected deployments at persistent risk. | HIGH | 7.2 | 0.3% | 36 |
No patch
|
| CVE-2026-23816 | Authenticated attackers can execute arbitrary OS commands on AOS-CX Switches through improper input validation in the CLI, potentially compromising network infrastructure. This command injection flaw (CWE-78) affects high-privileged users with network access and carries a CVSS score of 7.2, with no patch currently available. | HIGH | 7.2 | 0.1% | 36 |
No patch
|
| CVE-2026-76691 | A buffer overflow in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways allows an attacker who already holds high-privilege API credentials to execute arbitrary commands as a privileged operating-system user on the gateway appliance. Affected releases span the 9.4.x, 9.5.x, 9.6.x and 9.7.0.0 branches, per ENISA EUVD version ranges. The CVSS 3.1 vector requires PR:H, meaning exploitation is not unauthenticated; no public exploit was identified at time of analysis, and the issue is not listed in CISA KEV. | HIGH | 7.2 | – | 36 |
No patch
|
| CVE-2026-23596 | Unauthenticated attackers can trigger service restarts through the management API in Aruba Networking Private 5G Core, causing denial of service and disrupting system availability. This network-adjacent vulnerability requires no authentication or user interaction and has a publicly available patch to remediate the issue. | MEDIUM | 6.5 | 0.1% | 33 |
|
| CVE-2026-23597 | HPE Aruba Networking 5G Core API error handling leaks sensitive information including user accounts, roles, and system configuration to unauthenticated remote attackers. Exposed internal service details can be leveraged to identify attack vectors for privilege escalation and unauthorized access. A patch is available. | MEDIUM | 6.5 | 0.0% | 33 |
|
| CVE-2026-23598 | HPE Aruba Networking 5G Core API error handling exposes sensitive information including user accounts, roles, and system configuration to unauthenticated remote attackers. Successful exploitation enables attackers to gather intelligence on internal services and workflows, creating a foundation for further attacks targeting unauthorized access and privilege escalation. A patch is available. | MEDIUM | 6.5 | 0.0% | 33 |
|
| CVE-2026-23817 | web-based management interface of AOS-CX Switches is affected by url redirection to untrusted site (open redirect) (CVSS 6.5). | MEDIUM | 6.5 | 0.0% | 33 |
No patch
|
| CVE-2025-37155 | A vulnerability in the SSH restricted shell interface of the network management services allows improper access control for authenticated read-only users. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available. | HIGH | 7.8 | 0.0% | – |
No patch
|
| CVE-2025-37156 | A platform-level denial-of-service (DoS) vulnerability exists in ArubaOS-CX software. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available. | MEDIUM | 6.8 | 0.1% | – |
No patch
|
| CVE-2025-37157 | A command injection vulnerability exists in the AOS-CX Operating System. Rated medium severity (CVSS 6.7), this vulnerability is no authentication required. No vendor patch available. | MEDIUM | 6.7 | 0.1% | – |
No patch
|