Vendor
HPE Networking Wireless Operating System Multiple Vulnerabilities
7 CVEsHPE has addressed multiple vulnerabilities affecting various versions of its Networking Wireless Operating Systems (AOS-10 and AOS-8) that require firmware updates.
Remote Command Execution Vulnerability in HPE Rack Management Controller
1 CVEA critical vulnerability, CVE-2026-76740, in HPE Compute Scale-up and Superdome Flex servers allows unauthenticated remote attackers to execute arbitrary commands via the Rack Management Controller (RMC).
Critical Vulnerabilities in HPE Networking AOS-Switch
1 TTPMultiple high-severity vulnerabilities in HPE Networking AOS-Switch could allow unauthenticated attackers to achieve remote code execution, perform unauthorized actions, or cause denial of service.
Multiple Vulnerabilities in Aruba EdgeConnect
5 CVEsMultiple vulnerabilities in Aruba EdgeConnect allow for privilege escalation, denial of service, information disclosure, file manipulation, cross-site scripting, security bypass, and arbitrary code execution.
HPE Telco Universal SLA Management Multiple Vulnerabilities
2 rulesHPE published a security advisory addressing multiple unspecified vulnerabilities in HPE Telco Universal SLA Management version 4.6 and prior, prompting users to apply necessary updates.
Critical Vulnerability in HPE Unified OSS Console (UOC)
1 rule 1 TTPHPE published a security advisory (AV26-477) addressing a critical vulnerability in HPE Unified OSS Console (UOC) version 3.1.20 and prior, potentially leading to unauthorized access and control of network operations.
HPE Security Advisory for Telco Intelligent Assurance Vulnerabilities
2 rulesHPE released a security advisory addressing multiple vulnerabilities in Telco Intelligent Assurance version 4.2.14, prompting users to apply necessary updates to mitigate potential risks.
HPE ArubaOS Multiple Vulnerabilities
2 rulesHPE published security advisories addressing vulnerabilities in ArubaOS versions AOS-10.8.x.x, AOS-10.7.x.x, AOS-10.4.x.x, AOS-8.13.x.x, AOS-8.12.x.x, and AOS-8.10.x.x, as well as Aruba Networking AOS-8 Instant AP and AOS-10 AP, potentially allowing unauthorized access and control.
Third-Party Compromise Leading to Stealthy Intrusions via Trusted IT Management Tools
2 rules 4 TTPsA threat actor compromised a third-party IT services provider and abused legitimate IT management tools like HPE Operations Agent to conduct a stealthy campaign focusing on long-term access, credential theft, and persistent footholds within a target environment.
HPE Security Advisory for Telco Service Orchestrator and Activator
2 rulesHPE released a security advisory addressing multiple vulnerabilities in HPE Telco Service Orchestrator (versions prior to v5.6.0) and HPE Telco Service Activator (versions 10.5.0 and prior), urging users to apply necessary updates.