HPE ArubaOS (AOS-8 / AOS-10): eight CVSS 10.0 unauthenticated RCE and auth-bypass flaws ยท updates https://pwn.watch/i/hpe-aruba-aos-critical-rce-oct-2026 HPE Networking patched 72 vulnerabilities in its wireless operating systems AOS-8 and AOS-10 (ArubaOS) on Oct 22 2026 (advisory HPESBNW05162). Eight are rated CVSS 10.0: authentication bypasses, command injection, SQL injection and buffer overflows that let an unauthenticated remote attacker run code on Mobility Conductors, Controllers, Gateways and Access Points, several through the web management interface and the PAPI protocol. HPE urges customers to patch quickly and to restrict management interfaces. It knows of no public exploit code or exploitation. en Fri, 23 Oct 2026 00:00:00 GMT HPE ArubaOS (AOS-8 / AOS-10): eight CVSS 10.0 unauthenticated RCE and auth-bypass flaws: BleepingComputer reports the eight maximum-severity flaws and HPE's advice to restrict CLI and web management interfaces to a dedicated VLAN or firewall them. https://pwn.watch/i/hpe-aruba-aos-critical-rce-oct-2026 https://pwn.watch/i/hpe-aruba-aos-critical-rce-oct-2026#2026-10-23-14d02f2c Fri, 23 Oct 2026 00:00:00 GMT critical <p><a href="https://www.bleepingcomputer.com/news/security/hpe-patches-eight-max-severity-rce-and-auth-bypass-aos-flaws/">Source</a></p> HPE ArubaOS (AOS-8 / AOS-10): eight CVSS 10.0 unauthenticated RCE and auth-bypass flaws: HPE publishes HPESBNW05162 with fixes for 72 AOS-8 and AOS-10 vulnerabilities, eight of them CVSS 10.0, mostly found by its own security research. It knows of no public exploit code. https://pwn.watch/i/hpe-aruba-aos-critical-rce-oct-2026 https://pwn.watch/i/hpe-aruba-aos-critical-rce-oct-2026#2026-10-22-b8defdb2 Thu, 22 Oct 2026 00:00:00 GMT critical <p><a href="https://csaf.arubanetworking.hpe.com/2026/hpe_networking_-_hpesbnw05162.txt">Source</a></p> HPE ArubaOS (AOS-8 / AOS-10): eight CVSS 10.0 unauthenticated RCE and auth-bypass flaws: HPE Networking publishes an advance notification of the security advisories due on Oct 22. https://pwn.watch/i/hpe-aruba-aos-critical-rce-oct-2026 https://pwn.watch/i/hpe-aruba-aos-critical-rce-oct-2026#2026-10-15-01a0da70 Thu, 15 Oct 2026 00:00:00 GMT critical <p><a href="https://networkingsupport.hpe.com/notifications">Source</a></p>