HPE Networking Wireless Operating System Multiple Vulnerabilities
HPE has addressed multiple vulnerabilities affecting various versions of its Networking Wireless Operating Systems (AOS-10 and AOS-8) that require firmware updates.
CVE search metadata
CVE search record: CVE-2026-79844. Severity: critical. CVSS: 10.0. EPSS: 0.40%. KEV: no. Product: HPE Networking Wireless Operating Systems (AOS-10 < 10.8.1.2, 10.7.2.7, 10.4.1.14; AOS-8 < 8.13.3.1, 8.10.0.24). Brief: HPE Networking Wireless Operating System Multiple Vulnerabilities. Brief link: https://feed.craftedsignal.io/briefs/2026-10-hpe-aos-vulnerabilities/
CVE search record: CVE-2026-79845. Severity: high. CVSS: 7.3. EPSS: 0.43%. KEV: no. Product: HPE Networking Wireless Operating Systems (AOS-10 < 10.8.1.2, 10.7.2.7, 10.4.1.14; AOS-8 < 8.13.3.1, 8.10.0.24). Brief: HPE Networking Wireless Operating System Multiple Vulnerabilities. Brief link: https://feed.craftedsignal.io/briefs/2026-10-hpe-aos-vulnerabilities/
CVE search record: CVE-2026-79846. Severity: critical. CVSS: 10.0. EPSS: 0.50%. KEV: no. Product: HPE Networking Wireless Operating Systems (AOS-10 < 10.8.1.2, 10.7.2.7, 10.4.1.14; AOS-8 < 8.13.3.1, 8.10.0.24). Brief: HPE Networking Wireless Operating System Multiple Vulnerabilities. Brief link: https://feed.craftedsignal.io/briefs/2026-10-hpe-aos-vulnerabilities/
CVE search record: CVE-2026-79851. Severity: critical. CVSS: 10.0. EPSS: 0.50%. KEV: no. Product: HPE Networking Wireless Operating Systems (AOS-10 < 10.8.1.2, 10.7.2.7, 10.4.1.14; AOS-8 < 8.13.3.1, 8.10.0.24). Brief: HPE Networking Wireless Operating System Multiple Vulnerabilities. Brief link: https://feed.craftedsignal.io/briefs/2026-10-hpe-aos-vulnerabilities/
CVE search record: CVE-2026-79847. Severity: critical. CVSS: 10.0. EPSS: 0.50%. KEV: no. Product: HPE Networking Wireless Operating Systems (AOS-10 < 10.8.1.2, 10.7.2.7, 10.4.1.14; AOS-8 < 8.13.3.1, 8.10.0.24). Brief: HPE Networking Wireless Operating System Multiple Vulnerabilities. Brief link: https://feed.craftedsignal.io/briefs/2026-10-hpe-aos-vulnerabilities/
CVE search record: CVE-2026-79848. Severity: critical. CVSS: 10.0. EPSS: 0.54%. KEV: no. Product: HPE Networking Wireless Operating Systems (AOS-10 < 10.8.1.2, 10.7.2.7, 10.4.1.14; AOS-8 < 8.13.3.1, 8.10.0.24). Brief: HPE Networking Wireless Operating System Multiple Vulnerabilities. Brief link: https://feed.craftedsignal.io/briefs/2026-10-hpe-aos-vulnerabilities/
CVE search record: CVE-2026-79849. Severity: critical. CVSS: 10.0. EPSS: 0.54%. KEV: no. Product: HPE Networking Wireless Operating Systems (AOS-10 < 10.8.1.2, 10.7.2.7, 10.4.1.14; AOS-8 < 8.13.3.1, 8.10.0.24). Brief: HPE Networking Wireless Operating System Multiple Vulnerabilities. Brief link: https://feed.craftedsignal.io/briefs/2026-10-hpe-aos-vulnerabilities/
Triage facts
Revision 3- Applicability
- HPE Networking Wireless Operating Systems (AOS-10 < 10.8.1.2, 10.7.2.7, 10.4.1.14; AOS-8 < 8.13.3.1, 8.10.0.24)
- Evidence
- Unknown
- Severity
- High
- Action
- Elevated
- Sources
- 6 public sources
- Freshness
- Revision 3Oct 23, 16:41 UTC
- Vulnerabilities
- 7 CVEs
- Source quality
- A1Likely
Revision history 2 entries · Revision 3
HPE has released a security advisory (HPESBNW05162) addressing multiple vulnerabilities affecting HPE Networking Wireless Operating Systems, specifically AOS-10 and AOS-8 releases. The vulnerabilities affect versions prior to 10.8.1.2, 10.7.2.7, 10.4.1.14, 8.13.3.1, and 8.10.0.24. Administrators should consult the linked security bulletin for specific remediation paths and patch availability.
Recommendation
- Identify all instances of HPE Networking Wireless Operating Systems (AOS-10 and AOS-8) within the network environment.
- Upgrade firmware to the following versions or later: 10.8.1.2, 10.7.2.7, 10.4.1.14, 8.13.3.1, or 8.10.0.24.
- Monitor the HPE Security Bulletin Library for any additional disclosures or updates related to these advisory revisions.
Mitigations
Upgrade HPE Networking Wireless Operating Systems to versions 10.8.1.2, 10.7.2.7, 10.4.1.14, 8.13.3.1, 8.10.0.24 or later.
HPE Networking Wireless Operating System vulnerabilities