Hewlett Packard Enterprise has 260 CVEs on record between 2023 and 2026. Disclosure cadence is accelerating: 251 in the last 90 days against 0 in the 90 before. The busiest recent month was October 2026 with 156. The median CVSS is 7.5 (high), with 61 rated critical. None have a confirmed exploitation report. The dominant weakness classes are CWE-121 (13) and CWE-77 (11). Most affected products: ArubaOS (AOS) (72), Fabric Composer (46), ClearPass Policy Manager (CPPM) (33).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 7.5
- Publish → KEV
- —
- Last 90 days
- 251 prev 0
Weakness classes
Products
- ArubaOS (AOS) 72
- Fabric Composer 46
- ClearPass Policy Manager (CPPM) 33
- Instant ON 18
- arubaos-cx 16
- AOS-Switch (AOS-S) 9
Worst active — by depth score
CVE-2026-23813Critical· 9.8A vulnerability has been identified in the web-based management interface of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls66CVE-2026-79851Critical· 10.0Unauthenticated Buffer Overflow Vulnerability leads to Remote Code Execution in AOS-1055CVE-2026-79850Critical· 10.0Authentication Bypass Leading to Remote Code Execution in AOS-855CVE-2026-79849Critical· 10.0Unauthenticated SQL Injection Vulnerabilities allow Remote Code Execution in AOS-855CVE-2026-79848Critical· 10.0Unauthenticated SQL Injection Vulnerabilities allow Remote Code Execution in AOS-855
Hewlett Packard Enterprise vulnerabilities
CVEs affecting Hewlett Packard Enterprise, newest first. Open any entry for full detail, references, and exploit status.
260 CVEsRSS
CVE-2026-79821High· 8.2A security vulnerability in HPE NonStop SOAP 4.0 may cause memory corruption resulting in a system down.
A security vulnerability in HPE NonStop SOAP 4.0 may cause memory corruption resulting in a system down.
CVE-2026-76668Medium· 6.3A security vulnerability in HPE NonStop Kernel may allow user space access to privileged or unmapped data.
A security vulnerability in HPE NonStop Kernel may allow user space access to privileged or unmapped data.
CVE-2026-76665High· 7.1A security vulnerability in HPE NonStop EXPAND may cause out-of-bounds memory read resulting in buffer overflow.
A security vulnerability in HPE NonStop EXPAND may cause out-of-bounds memory read resulting in buffer overflow.
CVE-2026-76667Medium· 5.7A security vulnerability in HPE NonStop EXPAND may result in out-of-bounds memory read.
A security vulnerability in HPE NonStop EXPAND may result in out-of-bounds memory read.
CVE-2026-76666Medium· 4.7A security vulnerability in HPE NonStop EXPAND may result in out-of-bounds memory read.
A security vulnerability in HPE NonStop EXPAND may result in out-of-bounds memory read.
CVE-2026-76664Medium· 6.4A security vulnerability in HPE NonStop EXPAND may result in out-of-bounds memory read/write operations
A security vulnerability in HPE NonStop EXPAND may result in out-of-bounds memory read/write operations
CVE-2026-76663High· 7.5A stack-based buffer overflow vulnerability in HPE NonStop TELSERV can cause memory corruption that may result in DoS.
A stack-based buffer overflow vulnerability in HPE NonStop TELSERV can cause memory corruption that may result in DoS.
CVE-2026-76662Medium· 5.9A buffer overflow vulnerability in HPE NonStop TELSERV can cause memory corruption and DoS.
A buffer overflow vulnerability in HPE NonStop TELSERV can cause memory corruption and DoS.
CVE-2026-76661High· 7.6A vulnerability in HPE NonStop QIOMON allows an out-of-bounds write that can corrupt buffer data.
A vulnerability in HPE NonStop QIOMON allows an out-of-bounds write that can corrupt buffer data.
CVE-2026-76660High· 8.7A vulnerability in HPE NonStop CIPSAM allows an out-of-bounds write that can corrupt buffer data.
A vulnerability in HPE NonStop CIPSAM allows an out-of-bounds write that can corrupt buffer data.
CVE-2026-76659High· 7.5A vulnerability in the finger daemon of HPE NonStop TCP/IP UTILITIES could allow an unauthenticated remote attacker to cause a denial of service.
A vulnerability in the finger daemon of HPE NonStop TCP/IP UTILITIES could allow an unauthenticated remote attacker to cause a denial of service.
CVE-2026-76656Medium· 5.3A vulnerability in HPE NonStop TCP/IP UTILITIES could allow an unauthenticated remote attacker to cause a denial of service when traceroute is executed under certain conditions.
A vulnerability in HPE NonStop TCP/IP UTILITIES could allow an unauthenticated remote attacker to cause a denial of service when traceroute is executed under certain conditions.
CVE-2026-73799High· 7.5A security vulnerability in HPE NonStop SNMP Trap Multiplexer may cause memory corruption
A security vulnerability in HPE NonStop SNMP Trap Multiplexer may cause memory corruption
CVE-2026-76655High· 7.5A security vulnerability in HPE NonStop SNMP Trap Multiplexer may allow remote code execution
A security vulnerability in HPE NonStop SNMP Trap Multiplexer may allow remote code execution
CVE-2026-73798High· 8.2A security vulnerability in HPE NonStop DNS 9.2.3 Non Secure Version could cause a Denial of Service.
A security vulnerability in HPE NonStop DNS 9.2.3 Non Secure Version could cause a Denial of Service.
CVE-2026-73797Medium· 5.3A security vulnerability in HPE NonStop TSQLFIL may cause address space corruption when a specific API is called.
A security vulnerability in HPE NonStop TSQLFIL may cause address space corruption when a specific API is called.
CVE-2026-73796Medium· 4.4A security vulnerability in HPE NonStop TSQLEXE may cause application crash via a crafted SQL query.
A security vulnerability in HPE NonStop TSQLEXE may cause application crash via a crafted SQL query.
CVE-2026-73795Medium· 6.4A security vulnerability in HPE NonStop TMF Auditread2 can cause Denial of Service.
A security vulnerability in HPE NonStop TMF Auditread2 can cause Denial of Service.
CVE-2026-73794Medium· 4.6HPE NonStop MODULAR NSJ contains a predictable seed vulnerability in Random Number Generation (PRNG)
HPE NonStop MODULAR NSJ contains a predictable seed vulnerability in Random Number Generation (PRNG)
CVE-2026-73793High· 7.9HPE NonStop Middleware software has secret key handling and data deserialization vulnerability.
HPE NonStop Middleware software has secret key handling and data deserialization vulnerability.
CVE-2026-73792Low· 3.8A security vulnerability in HPE NonStop Java JToolkit can allow command Injection and buffer overflow.
A security vulnerability in HPE NonStop Java JToolkit can allow command Injection and buffer overflow.
CVE-2026-73791Low· 2.0A security vulnerability in HPE NonStop Hpjmeter can cause stack and heap buffer overflow.
A security vulnerability in HPE NonStop Hpjmeter can cause stack and heap buffer overflow.
CVE-2026-73790High· 8.2A vulnerability in HPE NonStop iTP WebServer can cause memory corruption and system shutdown.
A vulnerability in HPE NonStop iTP WebServer can cause memory corruption and system shutdown.
CVE-2026-79842Critical· 9.1An authentication bypass vulnerability exists in HPE Intelligent Management Center (iMC) prior to v7.3 E0713
An authentication bypass vulnerability exists in HPE Intelligent Management Center (iMC) prior to v7.3 E0713
CVE-2026-79800High· 8.8An authenticated path traversal vulnerability exists in the command line interface of ClearPass Policy Manager
An authenticated path traversal vulnerability exists in the command line interface of ClearPass Policy Manager. Successful exploitation could allow a low-privileged authenticated remote attacker to execute arbitrary code with elevated pr…
CVE-2026-76742Critical· 9.8Authentication bypass vulnerabilities exist in the web management interface of AOS-S
Authentication bypass vulnerabilities exist in the web management interface of AOS-S. Successful exploitation could allow an unauthenticated remote attacker to gain unauthorized access to the affected system.
CVE-2026-76741Medium· 6.5Buffer overflow vulnerabilities exist in the affected interface of AOS-S
Buffer overflow vulnerabilities exist in the affected interface of AOS-S. Successful exploitation could allow an authenticated remote attacker to cause a denial-of-service condition on the affected system.
CVE-2026-76745Critical· 9.6Memory corruption vulnerabilities exist in AOS-S that are reachable by an unauthenticated adjacent attacker
Memory corruption vulnerabilities exist in AOS-S that are reachable by an unauthenticated adjacent attacker. Successful exploitation could allow an attacker to execute arbitrary code.
CVE-2026-76744Critical· 9.8Buffer overflow vulnerabilities exist in the affected interface of AOS-S
Buffer overflow vulnerabilities exist in the affected interface of AOS-S. Successful exploitation could allow an unauthenticated remote attacker to execute arbitrary code.
CVE-2026-76743Critical· 9.8A vulnerability have been identified in the management interface of AOS-S that could potentially allow an unauthenticated remote attacker to circumvent existing authentication controls if certain preconditions outside of the attacker's c…
A vulnerability have been identified in the management interface of AOS-S that could potentially allow an unauthenticated remote attacker to circumvent existing authentication controls if certain preconditions outside of the attacker's c…