Hewlett Packard Enterprise issued patches addressing 72 vulnerabilities in ArubaOS, the software running Aruba Networking's mobility conductors, access points, controllers and gateways. Eight of the flaws, spanning AOS-8 and AOS-10, carry maximum severity ratings and allow unauthenticated remote attackers to bypass authentication or execute code without user interaction.
bleepingcomputer.com
· 2026-10-23
HPE has released patches for CVE-2026-73749, a critical buffer overflow in ArubaOS-CX that lets unauthenticated attackers send malformed packets to a daemon to gain elevated code execution. The bulletin also lists 23 other vulnerabilities, several rated high severity, affecting management and web modules across multiple AOS-CX release branches. One vulnerable version has already reached end of maintenance but still received a fix due to the severity of the flaw.
bleepingcomputer.com
· 2026-09-03
GoKawiil