HPE

HPE

12 CVEs tracked in the last 90 days

12 Total CVEs

0 Critical

6 High

6 Medium

0 Low

Severity Distribution

Critical 0 (0.0%)

High 6 (50.0%)

Medium 6 (50.0%)

Low 0 (0.0%)

Top Affected Products

hpe aruba networking private 5g core 2

Latest CVEs

CVE ID	Severity	CVSS	Description	Date
CVE-2025-71238	medium	—	In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix bsg_done() c…	Mar 4, 2026
CVE-2026-23600	medium	—	A remote authentication bypass vulnerability exists in HPE AutoPass License Server (APLS).	Mar 2, 2026
CVE-2025-71236	medium	—	In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Validate sp befo…	Feb 18, 2026
CVE-2025-71232	medium	—	In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Free sp in error…	Feb 18, 2026
CVE-2026-23599	high	7.8	A local privilege-escalation vulnerability has been discovered in the HPE Aruba Networking ClearPass…	Feb 18, 2026
CVE-2026-23598	medium	6.5	Vulnerabilities in the API error handling of an HPE Aruba Networking 5G Core server API could allow…	Feb 17, 2026
CVE-2026-23597	medium	6.5	Vulnerabilities in the API error handling of an HPE Aruba Networking 5G Core server API could allow…	Feb 17, 2026
CVE-2026-23593	high	7.5	A vulnerability in the web-based management interface of HPE Aruba Networking Fabric Composer could …	Jan 27, 2026
CVE-2026-23592	high	7.2	Insecure file operations in HPE Aruba Networking Fabric Composerâ€™s backup functionality could allo…	Jan 27, 2026
CVE-2025-37186	high	7.8	A local privilege-escalation vulnerability has been discovered in the HPE Aruba Networking Virtual I…	Jan 13, 2026
CVE-2025-37166	high	7.5	A vulnerability affecting HPE Networking Instant On Access Points has been identified where a device…	Jan 13, 2026
CVE-2025-37165	high	7.5	A vulnerability in the router mode configuration of HPE Instant On Access Points exposed certain net…	Jan 13, 2026