{"version":"https://jsonfeed.org/version/1.1","title":"Patchfirst: Hewlett Packard Enterprise vulnerabilities","home_page_url":"https://patchfirst.co/vendor/hpe/","feed_url":"https://patchfirst.co/feed/vendor/hpe.json","description":"New and newly exploited Hewlett Packard Enterprise CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.","language":"en-GB","items":[{"id":"CVE-2026-79861","url":"https://patchfirst.co/cve/CVE-2026-79861/","title":"CVE-2026-79861: There is a command injection vulnerability in AOS-10 that could lead to unauthenticated remote code execution by…","content_text":"Hewlett Packard Enterprise (HPE) · ArubaOS (AOS). Not in CISA KEV. EPSS 1.6% (higher than 75.1% of CVEs). CVSS 9.8 CRITICAL. Priority 23.8 of 100.","summary":"There is a command injection vulnerability in AOS-10 that could lead to unauthenticated remote code execution by…","date_published":"2026-10-22T00:00:00.000Z","date_modified":"2026-10-30T19:19:12.000Z","tags":[],"_patchfirst":{"reason":"published","priority":23.8,"kev":null,"epss":{"score":0.01556,"percentile":0.75149},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-79857","url":"https://patchfirst.co/cve/CVE-2026-79857/","title":"CVE-2026-79857: There is a command injection vulnerability in the PAPI protocol (Aruba's access point management protocol) of AOS-8…","content_text":"Hewlett Packard Enterprise (HPE) · ArubaOS (AOS). Not in CISA KEV. EPSS 1.4% (higher than 72.7% of CVEs). CVSS 9.8 CRITICAL. Priority 23.3 of 100.","summary":"There is a command injection vulnerability in the PAPI protocol (Aruba's access point management protocol) of AOS-8…","date_published":"2026-10-22T00:00:00.000Z","date_modified":"2026-10-26T14:18:54.000Z","tags":[],"_patchfirst":{"reason":"published","priority":23.3,"kev":null,"epss":{"score":0.01415,"percentile":0.72725},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-79846","url":"https://patchfirst.co/cve/CVE-2026-79846/","title":"CVE-2026-79846: Command injection vulnerabilities exist in the affected interface of AOS-8 that could allow an unauthenticated remote…","content_text":"Hewlett Packard Enterprise (HPE) · ArubaOS (AOS). Not in CISA KEV. EPSS 1.4% (higher than 71.9% of CVEs). CVSS 10.0 CRITICAL. Priority 23.3 of 100.","summary":"Command injection vulnerabilities exist in the affected interface of AOS-8 that could allow an unauthenticated remote…","date_published":"2026-10-22T00:00:00.000Z","date_modified":"2026-10-30T20:17:17.000Z","tags":[],"_patchfirst":{"reason":"published","priority":23.3,"kev":null,"epss":{"score":0.0137,"percentile":0.71878},"cvss":{"score":10,"severity":"CRITICAL","version":"3.1"},"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-79864","url":"https://patchfirst.co/cve/CVE-2026-79864/","title":"CVE-2026-79864: Command injection vulnerabilities exist in the affected interface of AOS-10 that could allow an unauthenticated…","content_text":"Hewlett Packard Enterprise (HPE) · ArubaOS (AOS). Not in CISA KEV. EPSS 1.2% (higher than 67.2% of CVEs). CVSS 9.6 CRITICAL. Priority 22.1 of 100.","summary":"Command injection vulnerabilities exist in the affected interface of AOS-10 that could allow an unauthenticated…","date_published":"2026-10-22T00:00:00.000Z","date_modified":"2026-10-30T19:19:13.000Z","tags":[],"_patchfirst":{"reason":"published","priority":22.1,"kev":null,"epss":{"score":0.01163,"percentile":0.67222},"cvss":{"score":9.6,"severity":"CRITICAL","version":"3.1"},"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-79847","url":"https://patchfirst.co/cve/CVE-2026-79847/","title":"CVE-2026-79847: Buffer overflow vulnerabilities in the affected interface of AOS-10 could lead to unauthenticated remote code…","content_text":"Hewlett Packard Enterprise (HPE) · ArubaOS (AOS). Not in CISA KEV. EPSS 0.8% (higher than 57.1% of CVEs). CVSS 10.0 CRITICAL. Priority 20.3 of 100.","summary":"Buffer overflow vulnerabilities in the affected interface of AOS-10 could lead to unauthenticated remote code…","date_published":"2026-10-22T00:00:00.000Z","date_modified":"2026-10-26T14:18:54.000Z","tags":[],"_patchfirst":{"reason":"published","priority":20.3,"kev":null,"epss":{"score":0.00818,"percentile":0.57123},"cvss":{"score":10,"severity":"CRITICAL","version":"3.1"},"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-79851","url":"https://patchfirst.co/cve/CVE-2026-79851/","title":"CVE-2026-79851: Buffer overflow vulnerabilities exist in the affected interface of AOS-10 that could lead to unauthenticated remote…","content_text":"Hewlett Packard Enterprise (HPE) · ArubaOS (AOS). Not in CISA KEV. EPSS 0.8% (higher than 55.3% of CVEs). CVSS 10.0 CRITICAL. Priority 20.0 of 100.","summary":"Buffer overflow vulnerabilities exist in the affected interface of AOS-10 that could lead to unauthenticated remote…","date_published":"2026-10-22T00:00:00.000Z","date_modified":"2026-10-26T14:18:54.000Z","tags":[],"_patchfirst":{"reason":"published","priority":20,"kev":null,"epss":{"score":0.00761,"percentile":0.5529},"cvss":{"score":10,"severity":"CRITICAL","version":"3.1"},"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-79855","url":"https://patchfirst.co/cve/CVE-2026-79855/","title":"CVE-2026-79855: An authentication bypass vulnerability in the SSH daemon of AOS-8 allows an unauthenticated remote attacker to…","content_text":"Hewlett Packard Enterprise (HPE) · ArubaOS (AOS). Not in CISA KEV. EPSS 0.8% (higher than 55% of CVEs). CVSS 9.8 CRITICAL. Priority 19.8 of 100.","summary":"An authentication bypass vulnerability in the SSH daemon of AOS-8 allows an unauthenticated remote attacker to…","date_published":"2026-10-22T00:00:00.000Z","date_modified":"2026-10-26T14:18:54.000Z","tags":[],"_patchfirst":{"reason":"published","priority":19.8,"kev":null,"epss":{"score":0.00753,"percentile":0.55036},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-79860","url":"https://patchfirst.co/cve/CVE-2026-79860/","title":"CVE-2026-79860: Buffer overflow vulnerabilities exist in an underlying service of AOS-8 that could lead to unauthenticated remote code…","content_text":"Hewlett Packard Enterprise (HPE) · ArubaOS (AOS). Not in CISA KEV. EPSS 0.7% (higher than 54.7% of CVEs). CVSS 9.8 CRITICAL. Priority 19.7 of 100.","summary":"Buffer overflow vulnerabilities exist in an underlying service of AOS-8 that could lead to unauthenticated remote code…","date_published":"2026-10-22T00:00:00.000Z","date_modified":"2026-10-30T19:19:12.000Z","tags":[],"_patchfirst":{"reason":"published","priority":19.7,"kev":null,"epss":{"score":0.00744,"percentile":0.54731},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-79849","url":"https://patchfirst.co/cve/CVE-2026-79849/","title":"CVE-2026-79849: Vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated remote attacker to conduct SQL…","content_text":"Hewlett Packard Enterprise (HPE) · ArubaOS (AOS). Not in CISA KEV. EPSS 0.7% (higher than 53.3% of CVEs). CVSS 10.0 CRITICAL. Priority 19.6 of 100.","summary":"Vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated remote attacker to conduct SQL…","date_published":"2026-10-22T00:00:00.000Z","date_modified":"2026-10-26T14:18:54.000Z","tags":[],"_patchfirst":{"reason":"published","priority":19.6,"kev":null,"epss":{"score":0.00704,"percentile":0.53294},"cvss":{"score":10,"severity":"CRITICAL","version":"3.1"},"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-79848","url":"https://patchfirst.co/cve/CVE-2026-79848/","title":"CVE-2026-79848: Vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated remote attacker to conduct SQL…","content_text":"Hewlett Packard Enterprise (HPE) · ArubaOS (AOS). Not in CISA KEV. EPSS 0.7% (higher than 53.3% of CVEs). CVSS 10.0 CRITICAL. Priority 19.6 of 100.","summary":"Vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated remote attacker to conduct SQL…","date_published":"2026-10-22T00:00:00.000Z","date_modified":"2026-10-26T14:18:54.000Z","tags":[],"_patchfirst":{"reason":"published","priority":19.6,"kev":null,"epss":{"score":0.00704,"percentile":0.53294},"cvss":{"score":10,"severity":"CRITICAL","version":"3.1"},"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-79850","url":"https://patchfirst.co/cve/CVE-2026-79850/","title":"CVE-2026-79850: Vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated remote attacker to bypass existing…","content_text":"Hewlett Packard Enterprise (HPE) · ArubaOS (AOS). Not in CISA KEV. EPSS 0.7% (higher than 52.7% of CVEs). CVSS 10.0 CRITICAL. Priority 19.5 of 100.","summary":"Vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated remote attacker to bypass existing…","date_published":"2026-10-22T00:00:00.000Z","date_modified":"2026-10-26T14:18:54.000Z","tags":[],"_patchfirst":{"reason":"published","priority":19.5,"kev":null,"epss":{"score":0.00689,"percentile":0.52727},"cvss":{"score":10,"severity":"CRITICAL","version":"3.1"},"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-79844","url":"https://patchfirst.co/cve/CVE-2026-79844/","title":"CVE-2026-79844: Authentication bypass vulnerabilities in the affected interface of AOS-10 could allow an unauthenticated remote…","content_text":"Hewlett Packard Enterprise (HPE) · ArubaOS (AOS). Not in CISA KEV. EPSS 0.7% (higher than 52.7% of CVEs). CVSS 10.0 CRITICAL. Priority 19.5 of 100.","summary":"Authentication bypass vulnerabilities in the affected interface of AOS-10 could allow an unauthenticated remote…","date_published":"2026-10-22T00:00:00.000Z","date_modified":"2026-10-26T14:18:54.000Z","tags":[],"_patchfirst":{"reason":"published","priority":19.5,"kev":null,"epss":{"score":0.00689,"percentile":0.52727},"cvss":{"score":10,"severity":"CRITICAL","version":"3.1"},"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-79859","url":"https://patchfirst.co/cve/CVE-2026-79859/","title":"CVE-2026-79859: Buffer overflow vulnerabilities exist in the affected interface of AOS-8 that could lead to unauthenticated remote…","content_text":"Hewlett Packard Enterprise (HPE) · ArubaOS (AOS). Not in CISA KEV. EPSS 0.7% (higher than 52.9% of CVEs). CVSS 9.8 CRITICAL. Priority 19.4 of 100.","summary":"Buffer overflow vulnerabilities exist in the affected interface of AOS-8 that could lead to unauthenticated remote…","date_published":"2026-10-22T00:00:00.000Z","date_modified":"2026-10-30T19:19:12.000Z","tags":[],"_patchfirst":{"reason":"published","priority":19.4,"kev":null,"epss":{"score":0.00693,"percentile":0.52882},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-79853","url":"https://patchfirst.co/cve/CVE-2026-79853/","title":"CVE-2026-79853: Sensitive information disclosure vulnerabilities in the affected interface of AOS-10 could allow an unauthenticated…","content_text":"Hewlett Packard Enterprise (HPE) · ArubaOS (AOS). Not in CISA KEV. EPSS 0.7% (higher than 53% of CVEs). CVSS 9.8 CRITICAL. Priority 19.4 of 100.","summary":"Sensitive information disclosure vulnerabilities in the affected interface of AOS-10 could allow an unauthenticated…","date_published":"2026-10-22T00:00:00.000Z","date_modified":"2026-10-26T14:18:54.000Z","tags":[],"_patchfirst":{"reason":"published","priority":19.4,"kev":null,"epss":{"score":0.00697,"percentile":0.53042},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-79854","url":"https://patchfirst.co/cve/CVE-2026-79854/","title":"CVE-2026-79854: A vulnerability in the affected interface of AOS-10 could allow an unauthenticated remote attacker to conduct SQL…","content_text":"Hewlett Packard Enterprise (HPE) · ArubaOS (AOS). Not in CISA KEV. EPSS 0.6% (higher than 50.7% of CVEs). CVSS 9.8 CRITICAL. Priority 18.9 of 100.","summary":"A vulnerability in the affected interface of AOS-10 could allow an unauthenticated remote attacker to conduct SQL…","date_published":"2026-10-22T00:00:00.000Z","date_modified":"2026-10-26T14:18:54.000Z","tags":[],"_patchfirst":{"reason":"published","priority":18.9,"kev":null,"epss":{"score":0.00641,"percentile":0.50669},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-79852","url":"https://patchfirst.co/cve/CVE-2026-79852/","title":"CVE-2026-79852: A vulnerability in the web-based management interface of AOS could allow an unauthenticated remote attacker to conduct…","content_text":"Hewlett Packard Enterprise (HPE) · ArubaOS (AOS). Not in CISA KEV. EPSS 0.6% (higher than 50.7% of CVEs). CVSS 9.8 CRITICAL. Priority 18.9 of 100.","summary":"A vulnerability in the web-based management interface of AOS could allow an unauthenticated remote attacker to conduct…","date_published":"2026-10-22T00:00:00.000Z","date_modified":"2026-10-26T14:18:54.000Z","tags":[],"_patchfirst":{"reason":"published","priority":18.9,"kev":null,"epss":{"score":0.00641,"percentile":0.5067},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-79856","url":"https://patchfirst.co/cve/CVE-2026-79856/","title":"CVE-2026-79856: A buffer overflow vulnerability exists in the PAPI protocol of AOS-8 that could allow an unauthenticated remote…","content_text":"Hewlett Packard Enterprise (HPE) · ArubaOS (AOS). Not in CISA KEV. EPSS 0.6% (higher than 49.2% of CVEs). CVSS 9.8 CRITICAL. Priority 18.6 of 100.","summary":"A buffer overflow vulnerability exists in the PAPI protocol of AOS-8 that could allow an unauthenticated remote…","date_published":"2026-10-22T00:00:00.000Z","date_modified":"2026-10-26T14:18:54.000Z","tags":[],"_patchfirst":{"reason":"published","priority":18.6,"kev":null,"epss":{"score":0.00611,"percentile":0.49196},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-79872","url":"https://patchfirst.co/cve/CVE-2026-79872/","title":"CVE-2026-79872: A buffer overflow vulnerability exists in the underlying operating system of AOS that could lead to unauthenticated…","content_text":"Hewlett Packard Enterprise (HPE) · ArubaOS (AOS). Not in CISA KEV. EPSS 0.6% (higher than 46.3% of CVEs). CVSS 9.4 CRITICAL. Priority 17.8 of 100.","summary":"A buffer overflow vulnerability exists in the underlying operating system of AOS that could lead to unauthenticated…","date_published":"2026-10-22T00:00:00.000Z","date_modified":"2026-10-26T14:18:54.000Z","tags":[],"_patchfirst":{"reason":"published","priority":17.8,"kev":null,"epss":{"score":0.00556,"percentile":0.46349},"cvss":{"score":9.4,"severity":"CRITICAL","version":"3.1"},"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-79858","url":"https://patchfirst.co/cve/CVE-2026-79858/","title":"CVE-2026-79858: An unauthenticated SQL injection vulnerability exists in the PAPI protocol in AOS-8","content_text":"Hewlett Packard Enterprise (HPE) · ArubaOS (AOS). Not in CISA KEV. EPSS 0.5% (higher than 43.5% of CVEs). CVSS 9.8 CRITICAL. Priority 17.5 of 100.","summary":"An unauthenticated SQL injection vulnerability exists in the PAPI protocol in AOS-8","date_published":"2026-10-22T00:00:00.000Z","date_modified":"2026-10-30T20:17:18.000Z","tags":[],"_patchfirst":{"reason":"published","priority":17.5,"kev":null,"epss":{"score":0.0051,"percentile":0.43469},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-79865","url":"https://patchfirst.co/cve/CVE-2026-79865/","title":"CVE-2026-79865: A memory corruption vulnerability in the affected interface of AOS-10 could allow an unauthenticated adjacent attacker…","content_text":"Hewlett Packard Enterprise (HPE) · ArubaOS (AOS). Not in CISA KEV. EPSS 0.4% (higher than 28.7% of CVEs). CVSS 9.6 CRITICAL. Priority 14.4 of 100.","summary":"A memory corruption vulnerability in the affected interface of AOS-10 could allow an unauthenticated adjacent attacker…","date_published":"2026-10-22T00:00:00.000Z","date_modified":"2026-10-30T19:19:13.000Z","tags":[],"_patchfirst":{"reason":"published","priority":14.4,"kev":null,"epss":{"score":0.0035,"percentile":0.28654},"cvss":{"score":9.6,"severity":"CRITICAL","version":"3.1"},"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-79871","url":"https://patchfirst.co/cve/CVE-2026-79871/","title":"CVE-2026-79871: A sensitive information disclosure vulnerability in the command line interface of AOS-10 could allow an…","content_text":"Hewlett Packard Enterprise (HPE) · ArubaOS (AOS). Not in CISA KEV. EPSS 0.3% (higher than 24.3% of CVEs). CVSS 9.6 CRITICAL. Priority 13.5 of 100.","summary":"A sensitive information disclosure vulnerability in the command line interface of AOS-10 could allow an…","date_published":"2026-10-22T00:00:00.000Z","date_modified":"2026-10-26T14:18:54.000Z","tags":[],"_patchfirst":{"reason":"published","priority":13.5,"kev":null,"epss":{"score":0.00313,"percentile":0.24282},"cvss":{"score":9.6,"severity":"CRITICAL","version":"3.1"},"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-79869","url":"https://patchfirst.co/cve/CVE-2026-79869/","title":"CVE-2026-79869: Authentication bypass vulnerabilities in the affected interface of AOS-10 could allow an unauthenticated adjacent…","content_text":"Hewlett Packard Enterprise (HPE) · ArubaOS (AOS). Not in CISA KEV. EPSS 0.3% (higher than 22% of CVEs). CVSS 9.6 CRITICAL. Priority 13.0 of 100.","summary":"Authentication bypass vulnerabilities in the affected interface of AOS-10 could allow an unauthenticated adjacent…","date_published":"2026-10-22T00:00:00.000Z","date_modified":"2026-10-26T14:18:54.000Z","tags":[],"_patchfirst":{"reason":"published","priority":13,"kev":null,"epss":{"score":0.00294,"percentile":0.22006},"cvss":{"score":9.6,"severity":"CRITICAL","version":"3.1"},"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-79867","url":"https://patchfirst.co/cve/CVE-2026-79867/","title":"CVE-2026-79867: Authentication bypass vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated adjacent…","content_text":"Hewlett Packard Enterprise (HPE) · ArubaOS (AOS). Not in CISA KEV. EPSS 0.3% (higher than 22% of CVEs). CVSS 9.6 CRITICAL. Priority 13.0 of 100.","summary":"Authentication bypass vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated adjacent…","date_published":"2026-10-22T00:00:00.000Z","date_modified":"2026-10-30T19:19:13.000Z","tags":[],"_patchfirst":{"reason":"published","priority":13,"kev":null,"epss":{"score":0.00294,"percentile":0.22005},"cvss":{"score":9.6,"severity":"CRITICAL","version":"3.1"},"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-79870","url":"https://patchfirst.co/cve/CVE-2026-79870/","title":"CVE-2026-79870: An authentication bypass vulnerability in the PAPI protocol of AOS-8 could allow an unauthenticated adjacent attacker…","content_text":"Hewlett Packard Enterprise (HPE) · ArubaOS (AOS). Not in CISA KEV. EPSS 0.3% (higher than 19.2% of CVEs). CVSS 9.6 CRITICAL. Priority 12.5 of 100.","summary":"An authentication bypass vulnerability in the PAPI protocol of AOS-8 could allow an unauthenticated adjacent attacker…","date_published":"2026-10-22T00:00:00.000Z","date_modified":"2026-10-26T14:18:54.000Z","tags":[],"_patchfirst":{"reason":"published","priority":12.5,"kev":null,"epss":{"score":0.0027,"percentile":0.19211},"cvss":{"score":9.6,"severity":"CRITICAL","version":"3.1"},"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-79868","url":"https://patchfirst.co/cve/CVE-2026-79868/","title":"CVE-2026-79868: Authentication bypass vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated adjacent…","content_text":"Hewlett Packard Enterprise (HPE) · ArubaOS (AOS). Not in CISA KEV. EPSS 0.3% (higher than 19.2% of CVEs). CVSS 9.6 CRITICAL. Priority 12.5 of 100.","summary":"Authentication bypass vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated adjacent…","date_published":"2026-10-22T00:00:00.000Z","date_modified":"2026-10-30T19:19:13.000Z","tags":[],"_patchfirst":{"reason":"published","priority":12.5,"kev":null,"epss":{"score":0.0027,"percentile":0.19211},"cvss":{"score":9.6,"severity":"CRITICAL","version":"3.1"},"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-79863","url":"https://patchfirst.co/cve/CVE-2026-79863/","title":"CVE-2026-79863: Buffer overflow vulnerabilities in the affected interface of AOS-10 or AOS-8 could allow an unauthenticated adjacent…","content_text":"Hewlett Packard Enterprise (HPE) · ArubaOS (AOS). Not in CISA KEV. EPSS 0.3% (higher than 17.9% of CVEs). CVSS 9.6 CRITICAL. Priority 12.2 of 100.","summary":"Buffer overflow vulnerabilities in the affected interface of AOS-10 or AOS-8 could allow an unauthenticated adjacent…","date_published":"2026-10-22T00:00:00.000Z","date_modified":"2026-10-30T19:19:12.000Z","tags":[],"_patchfirst":{"reason":"published","priority":12.2,"kev":null,"epss":{"score":0.00261,"percentile":0.17917},"cvss":{"score":9.6,"severity":"CRITICAL","version":"3.1"},"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-79862","url":"https://patchfirst.co/cve/CVE-2026-79862/","title":"CVE-2026-79862: Buffer overflow vulnerabilities in the affected interface of AOS-10 or AOS-8 could allow an unauthenticated adjacent…","content_text":"Hewlett Packard Enterprise (HPE) · ArubaOS (AOS). Not in CISA KEV. EPSS 0.3% (higher than 17.9% of CVEs). CVSS 9.6 CRITICAL. Priority 12.2 of 100.","summary":"Buffer overflow vulnerabilities in the affected interface of AOS-10 or AOS-8 could allow an unauthenticated adjacent…","date_published":"2026-10-22T00:00:00.000Z","date_modified":"2026-10-30T19:19:12.000Z","tags":[],"_patchfirst":{"reason":"published","priority":12.2,"kev":null,"epss":{"score":0.00261,"percentile":0.17916},"cvss":{"score":9.6,"severity":"CRITICAL","version":"3.1"},"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-79866","url":"https://patchfirst.co/cve/CVE-2026-79866/","title":"CVE-2026-79866: An unauthenticated path traversal vulnerability exists in the PAPI protocol in AOS-8","content_text":"Hewlett Packard Enterprise (HPE) · ArubaOS (AOS). Not in CISA KEV. EPSS 0.2% (higher than 15.4% of CVEs). CVSS 9.6 CRITICAL. Priority 11.7 of 100.","summary":"An unauthenticated path traversal vulnerability exists in the PAPI protocol in AOS-8","date_published":"2026-10-22T00:00:00.000Z","date_modified":"2026-10-30T19:19:13.000Z","tags":[],"_patchfirst":{"reason":"published","priority":11.7,"kev":null,"epss":{"score":0.00242,"percentile":0.15377},"cvss":{"score":9.6,"severity":"CRITICAL","version":"3.1"},"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-79874","url":"https://patchfirst.co/cve/CVE-2026-79874/","title":"CVE-2026-79874: An authentication bypass in the API of AOS-10 allows an unauthenticated adjacent attacker to circumvent existing…","content_text":"Hewlett Packard Enterprise (HPE) · ArubaOS (AOS). Not in CISA KEV. EPSS 0.2% (higher than 15.6% of CVEs). CVSS 9.3 CRITICAL. Priority 11.6 of 100.","summary":"An authentication bypass in the API of AOS-10 allows an unauthenticated adjacent attacker to circumvent existing…","date_published":"2026-10-22T00:00:00.000Z","date_modified":"2026-10-26T14:18:54.000Z","tags":[],"_patchfirst":{"reason":"published","priority":11.6,"kev":null,"epss":{"score":0.00244,"percentile":0.15647},"cvss":{"score":9.3,"severity":"CRITICAL","version":"3.1"},"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-79873","url":"https://patchfirst.co/cve/CVE-2026-79873/","title":"CVE-2026-79873: Authentication bypass vulnerabilities in the PAPI protocol of AOS-10 could allow an unauthenticated adjacent attacker…","content_text":"Hewlett Packard Enterprise (HPE) · ArubaOS (AOS). Not in CISA KEV. EPSS 0.2% (higher than 15.6% of CVEs). CVSS 9.3 CRITICAL. Priority 11.6 of 100.","summary":"Authentication bypass vulnerabilities in the PAPI protocol of AOS-10 could allow an unauthenticated adjacent attacker…","date_published":"2026-10-22T00:00:00.000Z","date_modified":"2026-10-26T14:18:54.000Z","tags":[],"_patchfirst":{"reason":"published","priority":11.6,"kev":null,"epss":{"score":0.00244,"percentile":0.15647},"cvss":{"score":9.3,"severity":"CRITICAL","version":"3.1"},"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-79876","url":"https://patchfirst.co/cve/CVE-2026-79876/","title":"CVE-2026-79876: A sensitive information disclosure vulnerability in the Wi-Fi frame processing of AOS-10 could allow an…","content_text":"Hewlett Packard Enterprise (HPE) · ArubaOS (AOS). Not in CISA KEV. EPSS 0.2% (higher than 14.1% of CVEs). CVSS 9.3 CRITICAL. Priority 11.2 of 100.","summary":"A sensitive information disclosure vulnerability in the Wi-Fi frame processing of AOS-10 could allow an…","date_published":"2026-10-22T00:00:00.000Z","date_modified":"2026-10-30T20:17:18.000Z","tags":[],"_patchfirst":{"reason":"published","priority":11.2,"kev":null,"epss":{"score":0.00231,"percentile":0.14072},"cvss":{"score":9.3,"severity":"CRITICAL","version":"3.1"},"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-79875","url":"https://patchfirst.co/cve/CVE-2026-79875/","title":"CVE-2026-79875: A vulnerability has been identified in the PAPI protocol of AOS-8 that could potentially allow an unauthenticated…","content_text":"Hewlett Packard Enterprise (HPE) · ArubaOS (AOS). Not in CISA KEV. EPSS 0.2% (higher than 13.9% of CVEs). CVSS 9.3 CRITICAL. Priority 11.2 of 100.","summary":"A vulnerability has been identified in the PAPI protocol of AOS-8 that could potentially allow an unauthenticated…","date_published":"2026-10-22T00:00:00.000Z","date_modified":"2026-10-30T20:17:18.000Z","tags":[],"_patchfirst":{"reason":"published","priority":11.2,"kev":null,"epss":{"score":0.0023,"percentile":0.13862},"cvss":{"score":9.3,"severity":"CRITICAL","version":"3.1"},"vendor":"Hewlett Packard Enterprise (HPE)","product":"ArubaOS (AOS)","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-79842","url":"https://patchfirst.co/cve/CVE-2026-79842/","title":"CVE-2026-79842: An authentication bypass vulnerability exists in HPE Intelligent Management Center (iMC) prior to v7.3 E0713","content_text":"Hewlett Packard Enterprise · HPE Intelligent Management Center (iMC). Not in CISA KEV. EPSS 0.3% (higher than 26% of CVEs). CVSS 9.1 CRITICAL. Priority 14.1 of 100.","summary":"An authentication bypass vulnerability exists in HPE Intelligent Management Center (iMC) prior to v7.3 E0713","date_published":"2026-10-08T00:00:00.000Z","date_modified":"2026-10-10T04:18:16.000Z","tags":[],"_patchfirst":{"reason":"published","priority":14.1,"kev":null,"epss":{"score":0.00328,"percentile":0.25977},"cvss":{"score":9.1,"severity":"CRITICAL","version":"3.1"},"vendor":"Hewlett Packard Enterprise","product":"HPE Intelligent Management Center (iMC)","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-76742","url":"https://patchfirst.co/cve/CVE-2026-76742/","title":"CVE-2026-76742: Authentication bypass vulnerabilities exist in the web management interface of AOS-S","content_text":"Hewlett Packard Enterprise (HPE) · AOS-Switch (AOS-S). Not in CISA KEV. EPSS 0.6% (higher than 48% of CVEs). CVSS 9.8 CRITICAL. Priority 18.6 of 100.","summary":"Authentication bypass vulnerabilities exist in the web management interface of AOS-S","date_published":"2026-10-06T00:00:00.000Z","date_modified":"2026-10-08T04:17:35.000Z","tags":[],"_patchfirst":{"reason":"published","priority":18.6,"kev":null,"epss":{"score":0.00586,"percentile":0.47996},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Hewlett Packard Enterprise (HPE)","product":"AOS-Switch (AOS-S)","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-76743","url":"https://patchfirst.co/cve/CVE-2026-76743/","title":"CVE-2026-76743: A vulnerability have been identified in the management interface of AOS-S that could potentially allow an…","content_text":"Hewlett Packard Enterprise (HPE) · AOS-Switch (AOS-S). Not in CISA KEV. EPSS 0.5% (higher than 45.9% of CVEs). CVSS 9.8 CRITICAL. Priority 18.2 of 100.","summary":"A vulnerability have been identified in the management interface of AOS-S that could potentially allow an…","date_published":"2026-10-06T00:00:00.000Z","date_modified":"2026-10-08T04:17:36.000Z","tags":[],"_patchfirst":{"reason":"published","priority":18.2,"kev":null,"epss":{"score":0.00549,"percentile":0.45946},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Hewlett Packard Enterprise (HPE)","product":"AOS-Switch (AOS-S)","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-76750","url":"https://patchfirst.co/cve/CVE-2026-76750/","title":"CVE-2026-76750: Deserialization of untrusted data vulnerabilities exist in the web interface of HPE Networking ClearPass Policy Manager","content_text":"Hewlett Packard Enterprise (HPE) · ClearPass Policy Manager (CPPM). Not in CISA KEV. EPSS 0.5% (higher than 45.3% of CVEs). CVSS 9.8 CRITICAL. Priority 18.1 of 100.","summary":"Deserialization of untrusted data vulnerabilities exist in the web interface of HPE Networking ClearPass Policy Manager","date_published":"2026-10-06T00:00:00.000Z","date_modified":"2026-10-08T04:17:38.000Z","tags":[],"_patchfirst":{"reason":"published","priority":18.1,"kev":null,"epss":{"score":0.00537,"percentile":0.45258},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Hewlett Packard Enterprise (HPE)","product":"ClearPass Policy Manager (CPPM)","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-76753","url":"https://patchfirst.co/cve/CVE-2026-76753/","title":"CVE-2026-76753: A format string vulnerability in an affected service interface of HPE Networking ClearPass Policy Manager could allow…","content_text":"Hewlett Packard Enterprise (HPE) · ClearPass Policy Manager (CPPM). Not in CISA KEV. EPSS 0.5% (higher than 44.6% of CVEs). CVSS 9.8 CRITICAL. Priority 17.9 of 100.","summary":"A format string vulnerability in an affected service interface of HPE Networking ClearPass Policy Manager could allow…","date_published":"2026-10-06T00:00:00.000Z","date_modified":"2026-10-08T04:17:39.000Z","tags":[],"_patchfirst":{"reason":"published","priority":17.9,"kev":null,"epss":{"score":0.00526,"percentile":0.44554},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Hewlett Packard Enterprise (HPE)","product":"ClearPass Policy Manager (CPPM)","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-76744","url":"https://patchfirst.co/cve/CVE-2026-76744/","title":"CVE-2026-76744: Buffer overflow vulnerabilities exist in the affected interface of AOS-S","content_text":"Hewlett Packard Enterprise (HPE) · AOS-Switch (AOS-S). Not in CISA KEV. EPSS 0.5% (higher than 43.5% of CVEs). CVSS 9.8 CRITICAL. Priority 17.7 of 100.","summary":"Buffer overflow vulnerabilities exist in the affected interface of AOS-S","date_published":"2026-10-06T00:00:00.000Z","date_modified":"2026-10-08T04:17:36.000Z","tags":[],"_patchfirst":{"reason":"published","priority":17.7,"kev":null,"epss":{"score":0.0051,"percentile":0.4353},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Hewlett Packard Enterprise (HPE)","product":"AOS-Switch (AOS-S)","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-76752","url":"https://patchfirst.co/cve/CVE-2026-76752/","title":"CVE-2026-76752: Authentication bypass vulnerabilities exist in the web-based management and API interfaces of HPE Networking ClearPass…","content_text":"Hewlett Packard Enterprise (HPE) · ClearPass Policy Manager (CPPM). Not in CISA KEV. EPSS 0.5% (higher than 40.7% of CVEs). CVSS 9.8 CRITICAL. Priority 17.2 of 100.","summary":"Authentication bypass vulnerabilities exist in the web-based management and API interfaces of HPE Networking ClearPass…","date_published":"2026-10-06T00:00:00.000Z","date_modified":"2026-10-08T04:17:39.000Z","tags":[],"_patchfirst":{"reason":"published","priority":17.2,"kev":null,"epss":{"score":0.0047,"percentile":0.40709},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Hewlett Packard Enterprise (HPE)","product":"ClearPass Policy Manager (CPPM)","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-79796","url":"https://patchfirst.co/cve/CVE-2026-79796/","title":"CVE-2026-79796: Vulnerabilities have been identified in the affected interface of ClearPass Policy Manager that could potentially…","content_text":"Hewlett Packard Enterprise (HPE) · ClearPass Policy Manager (CPPM). Not in CISA KEV. EPSS 0.5% (higher than 40.4% of CVEs). CVSS 9.8 CRITICAL. Priority 17.1 of 100.","summary":"Vulnerabilities have been identified in the affected interface of ClearPass Policy Manager that could potentially…","date_published":"2026-10-06T00:00:00.000Z","date_modified":"2026-10-08T04:17:42.000Z","tags":[],"_patchfirst":{"reason":"published","priority":17.1,"kev":null,"epss":{"score":0.00466,"percentile":0.40355},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Hewlett Packard Enterprise (HPE)","product":"ClearPass Policy Manager (CPPM)","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-79805","url":"https://patchfirst.co/cve/CVE-2026-79805/","title":"CVE-2026-79805: An authenticated path traversal vulnerability exists in ClearPass Policy Manager","content_text":"Hewlett Packard Enterprise (HPE) · ClearPass Policy Manager (CPPM). Not in CISA KEV. EPSS 0.4% (higher than 37.4% of CVEs). CVSS 9.8 CRITICAL. Priority 16.5 of 100.","summary":"An authenticated path traversal vulnerability exists in ClearPass Policy Manager","date_published":"2026-10-06T00:00:00.000Z","date_modified":"2026-10-08T04:17:50.000Z","tags":[],"_patchfirst":{"reason":"published","priority":16.5,"kev":null,"epss":{"score":0.00432,"percentile":0.37427},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Hewlett Packard Enterprise (HPE)","product":"ClearPass Policy Manager (CPPM)","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-76747","url":"https://patchfirst.co/cve/CVE-2026-76747/","title":"CVE-2026-76747: Buffer overflow vulnerabilities exist in the affected interface of AOS-S","content_text":"Hewlett Packard Enterprise (HPE) · AOS-Switch (AOS-S). Not in CISA KEV. EPSS 0.4% (higher than 39% of CVEs). CVSS 9.1 CRITICAL. Priority 16.3 of 100.","summary":"Buffer overflow vulnerabilities exist in the affected interface of AOS-S","date_published":"2026-10-06T00:00:00.000Z","date_modified":"2026-10-07T20:17:14.000Z","tags":[],"_patchfirst":{"reason":"published","priority":16.3,"kev":null,"epss":{"score":0.00448,"percentile":0.38965},"cvss":{"score":9.1,"severity":"CRITICAL","version":"3.1"},"vendor":"Hewlett Packard Enterprise (HPE)","product":"AOS-Switch (AOS-S)","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-76754","url":"https://patchfirst.co/cve/CVE-2026-76754/","title":"CVE-2026-76754: A vulnerability in an affected interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to…","content_text":"Hewlett Packard Enterprise (HPE) · ClearPass Policy Manager (CPPM). Not in CISA KEV. EPSS 0.4% (higher than 32.5% of CVEs). CVSS 9.8 CRITICAL. Priority 15.5 of 100.","summary":"A vulnerability in an affected interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to…","date_published":"2026-10-06T00:00:00.000Z","date_modified":"2026-10-08T04:17:39.000Z","tags":[],"_patchfirst":{"reason":"published","priority":15.5,"kev":null,"epss":{"score":0.00385,"percentile":0.32549},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Hewlett Packard Enterprise (HPE)","product":"ClearPass Policy Manager (CPPM)","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-79798","url":"https://patchfirst.co/cve/CVE-2026-79798/","title":"CVE-2026-79798: SQL injection vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow a…","content_text":"Hewlett Packard Enterprise (HPE) · ClearPass Policy Manager (CPPM). Not in CISA KEV. EPSS 0.3% (higher than 27.8% of CVEs). CVSS 9.9 CRITICAL. Priority 14.7 of 100.","summary":"SQL injection vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow a…","date_published":"2026-10-06T00:00:00.000Z","date_modified":"2026-10-08T04:17:43.000Z","tags":[],"_patchfirst":{"reason":"published","priority":14.7,"kev":null,"epss":{"score":0.00343,"percentile":0.27811},"cvss":{"score":9.9,"severity":"CRITICAL","version":"3.1"},"vendor":"Hewlett Packard Enterprise (HPE)","product":"ClearPass Policy Manager (CPPM)","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-79801","url":"https://patchfirst.co/cve/CVE-2026-79801/","title":"CVE-2026-79801: A missing integrity verification vulnerability in the client agent software of HPE Networking ClearPass Policy Manager…","content_text":"Hewlett Packard Enterprise (HPE) · ClearPass Policy Manager (CPPM). Not in CISA KEV. EPSS 0.3% (higher than 25.4% of CVEs). CVSS 9.8 CRITICAL. Priority 14.1 of 100.","summary":"A missing integrity verification vulnerability in the client agent software of HPE Networking ClearPass Policy Manager…","date_published":"2026-10-06T00:00:00.000Z","date_modified":"2026-10-08T04:17:47.000Z","tags":[],"_patchfirst":{"reason":"published","priority":14.1,"kev":null,"epss":{"score":0.00324,"percentile":0.25424},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Hewlett Packard Enterprise (HPE)","product":"ClearPass Policy Manager (CPPM)","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-76751","url":"https://patchfirst.co/cve/CVE-2026-76751/","title":"CVE-2026-76751: A missing integrity verification vulnerability exists in the OnGuard agent of ClearPass Policy Manager","content_text":"Hewlett Packard Enterprise (HPE) · ClearPass Policy Manager (CPPM). Not in CISA KEV. EPSS 0.3% (higher than 22.7% of CVEs). CVSS 9.8 CRITICAL. Priority 13.6 of 100.","summary":"A missing integrity verification vulnerability exists in the OnGuard agent of ClearPass Policy Manager","date_published":"2026-10-06T00:00:00.000Z","date_modified":"2026-10-08T04:17:38.000Z","tags":[],"_patchfirst":{"reason":"published","priority":13.6,"kev":null,"epss":{"score":0.003,"percentile":0.22683},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Hewlett Packard Enterprise (HPE)","product":"ClearPass Policy Manager (CPPM)","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-79794","url":"https://patchfirst.co/cve/CVE-2026-79794/","title":"CVE-2026-79794: A SQL injection vulnerability in the web-based management interface of ClearPass Policy Manager could allow an…","content_text":"Hewlett Packard Enterprise (HPE) · ClearPass Policy Manager (CPPM). Not in CISA KEV. EPSS 0.3% (higher than 22.4% of CVEs). CVSS 9.1 CRITICAL. Priority 13.0 of 100.","summary":"A SQL injection vulnerability in the web-based management interface of ClearPass Policy Manager could allow an…","date_published":"2026-10-06T00:00:00.000Z","date_modified":"2026-10-08T04:17:42.000Z","tags":[],"_patchfirst":{"reason":"published","priority":13,"kev":null,"epss":{"score":0.00297,"percentile":0.22418},"cvss":{"score":9.1,"severity":"CRITICAL","version":"3.1"},"vendor":"Hewlett Packard Enterprise (HPE)","product":"ClearPass Policy Manager (CPPM)","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-76745","url":"https://patchfirst.co/cve/CVE-2026-76745/","title":"CVE-2026-76745: Memory corruption vulnerabilities exist in AOS-S that are reachable by an unauthenticated adjacent attacker","content_text":"Hewlett Packard Enterprise (HPE) · AOS-Switch (AOS-S). Not in CISA KEV. EPSS 0.2% (higher than 14.5% of CVEs). CVSS 9.6 CRITICAL. Priority 11.8 of 100.","summary":"Memory corruption vulnerabilities exist in AOS-S that are reachable by an unauthenticated adjacent attacker","date_published":"2026-10-06T00:00:00.000Z","date_modified":"2026-10-08T04:17:37.000Z","tags":[],"_patchfirst":{"reason":"published","priority":11.8,"kev":null,"epss":{"score":0.00235,"percentile":0.14517},"cvss":{"score":9.6,"severity":"CRITICAL","version":"3.1"},"vendor":"Hewlett Packard Enterprise (HPE)","product":"AOS-Switch (AOS-S)","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-76746","url":"https://patchfirst.co/cve/CVE-2026-76746/","title":"CVE-2026-76746: An unauthenticated buffer overflow vulnerability exists in AOS-S","content_text":"Hewlett Packard Enterprise (HPE) · AOS-Switch (AOS-S). Not in CISA KEV. EPSS 0.2% (higher than 9.8% of CVEs). CVSS 9.3 CRITICAL. Priority 10.6 of 100.","summary":"An unauthenticated buffer overflow vulnerability exists in AOS-S","date_published":"2026-10-06T00:00:00.000Z","date_modified":"2026-10-07T20:17:14.000Z","tags":[],"_patchfirst":{"reason":"published","priority":10.6,"kev":null,"epss":{"score":0.00199,"percentile":0.09787},"cvss":{"score":9.3,"severity":"CRITICAL","version":"3.1"},"vendor":"Hewlett Packard Enterprise (HPE)","product":"AOS-Switch (AOS-S)","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2025-37164#kev","url":"https://patchfirst.co/cve/CVE-2025-37164/","title":"[KEV] CVE-2025-37164: Hewlett Packard Enterprise (HPE) OneView Code Injection Vulnerability","content_text":"Hewlett Packard Enterprise (HPE) · OneView. In CISA KEV since 2026-01-07. ENISA EUVD lists it as exploited. EPSS 90.2% (higher than 99.8% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 74.8 of 100.","summary":"Hewlett Packard Enterprise (HPE) OneView Code Injection Vulnerability","date_published":"2026-01-07T00:00:00.000Z","date_modified":"2026-06-17T09:15:17.000Z","tags":["kev","public-exploit","T1190","T1059"],"_patchfirst":{"reason":"kev","priority":74.8,"kev":{"dateAdded":"2026-01-07","ransomware":false},"epss":{"score":0.90193,"percentile":0.99797},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Hewlett Packard Enterprise (HPE)","product":"OneView","techniqueIds":["T1190","T1059"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}}]}