Loading story…
HPE released security updates for HPE Networking Fabric Composer to remediate multiple vulnerabilities affecting version 7.3.3 and earlier. The most severe, CVE-2026-76657 and CVE-2026-76658 (CVSS 10.0), allow unauthenticated remote attackers to gain administrator access, bypass authentication, execute privileged commands, and fully compromise the Fabric Composer host. CVE-2026-19766 (CVSS 9.6) is an adjacent-network authentication-bypass flaw that can permit privileged arbitrary code execution.
As Fabric Composer manages data-center network fabrics, a successful compromise could let attackers alter network configurations, steal data, and move laterally through affected environments. HPE said it was not aware of public exploit code or public discussion of the flaws at advisory release; organizations should upgrade to the fixed releases and strictly limit access to Fabric Composer management interfaces.
See real exploitation activity before you spend the cycle.
2 events from the most recent confirmed update back to the earliest known activity.
HPE released security updates for 86 vulnerabilities affecting Aruba Networking AOS-CX and Fabric Composer, including six critical and 46 high-severity flaws with impacts such as remote code execution, authentication bypass, privilege escalation, arbitrary file write, information disclosure, and denial of service. HPE said it will not provide patches or workarounds for end-of-life AOS-CX 10.10.x or Fabric Composer versions that have reached end of maintenance or support.
HPE released security updates for HPE Networking Fabric Composer to remediate numerous flaws affecting version 7.3.3 and earlier, including CVE-2026-76657 and CVE-2026-76658 (CVSS 10.0) and CVE-2026-19766 (CVSS 9.6). The flaws could permit unauthenticated administrative access and privileged code execution; HPE recommended upgrading to fixed releases and restricting management-interface access.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See real exploitation activity behind this advisory so you can triage it against everything else in the queue.
5 references tracked. Mallory keeps watching after this page renders.
socprime.com
Open sourceacn.gov.it
Open sourcecyberaccord.com
Open sourcecybersecuritynews.com
Open sourcecirt.gy
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Hewlett Packard Enterprise released **ALE 5.1.0.0** to fix ten vulnerabilities in HPE Networking Analytics and Location Engine (ALE) 5.0.0.0 and earlier. The most severe, `CVE-2026-76708` (hard-coded default credentials) and `CVE-2026-76709` (privileged arbitrary file write), are remotely exploitable without authentication, carry CVSS 9.8 scores, and could enable full appliance compromise. The ALE advisory also addresses information disclosure, data injection, root-level filesystem and command-execution exposure, man-in-the-middle risk, denial of service, and password-hash disclosure. HPE reported no known public exploit code or active exploitation, but administrators should upgrade immediately and restrict or segment access to ALE management interfaces; a related HPE advisory also identifies a remote denial-of-service vulnerability in Telco Service Orchestrator 5.6.0 and earlier.
Sep 25, 2026
Hewlett Packard Enterprise released security updates for **HPE Networking Instant On Access Points** to fix two vulnerabilities affecting firmware version `3.2.0.1` and earlier. The most severe issue, **`CVE-2025-37103`**, is a critical hard-coded credentials flaw with a **CVSS score of 9.8** that could allow a remote attacker to gain administrative access to the device web interface. HPE documented the issues in security bulletin **`HPESBNW04894`** and urged customers to update affected systems. HPE also patched **`CVE-2025-37102`**, a high-severity vulnerability with a **CVSS score of 7.2** that allows a remote authenticated attacker to inject arbitrary commands into the device console and execute commands on the underlying system. The company recommended immediate upgrades to firmware version `3.2.1.0` or later to reduce the risk of unauthorized access and command execution on exposed access points.
Jul 24, 2026
Hewlett Packard Enterprise released bulletin **HPESBNW05135 rev.1** to remediate dozens of vulnerabilities in HPE Networking EdgeConnect SD-WAN Gateways and EdgeConnect SD-WAN Orchestrator. Five critical issues, **CVE-2026-76669** through **CVE-2026-76674**, carry CVSS scores of 9.8–9.9 and include authentication and authorization bypasses, information disclosure, and an unauthenticated buffer-overflow remote-code-execution flaw. An attacker could gain administrator or root-level access, steal third-party API credentials, execute arbitrary commands, disrupt services, and fully compromise gateway appliances or Orchestrator hosts. HPE has issued fixed ECOS and Orchestrator releases and urged customers to upgrade promptly. Organizations should isolate management interfaces, restrict access with Layer 3 firewall rules, and monitor administrative activity while updates are deployed. HPE reported no known public exploit code or active exploitation when the bulletin was published; the Canadian Centre for Cyber Security and Guyana National CIRT also advised affected administrators to review HPE’s guidance and apply the required updates.
Sep 17, 2026