HPE patches eight max severity RCE and auth bypass AOS flaws

Hewlett Packard Enterprise (HPE) has released security updates to address 72 vulnerabilities in Aruba Operating System (ArubaOS), including eight maximum-severity flaws that could allow remote unauthenticated attackers to bypass authentication and execute arbitrary code. These vulnerabilities affect both AOS-8 and AOS-10 software versions and can be exploited without user interaction. HPE recommends immediate patching and advises restricting access to management interfaces to reduce exposure, as no known in-the-wild exploitation has been observed yet.

AI-extracted · verify before operational use