Hewlett Packard Enterprise (HPE) has issued updates to address multiple security vulnerabilities in its Aruba networking products. These patches, released last week, target 72 flaws in the AOS-8 and AOS-10 wireless operating systems, including 33 critical issues.
Critical Vulnerabilities in Aruba Systems
The security updates focus on eight vulnerabilities of maximum severity, identified as CVE-2026-79844 through CVE-2026-79851. If exploited, these flaws could enable attackers to execute remote code, bypass authentication controls, gain administrative access, and compromise systems entirely.
HPE has integrated fixes for these vulnerabilities into AOS versions 8.10.0.24, 8.13.3.1, 10.4.1.14, 10.7.2.7, and 10.8.1.2, which are now available for their mobility conductor, controller, gateway, and access point products.
Additional Security Concerns
Beyond the critical vulnerabilities, the updates also resolve several high-severity issues. These include over a dozen vulnerabilities that could be exploited without prior authentication, eight of medium severity, and one low-severity flaw. The patches are crucial for ensuring the security of all affected systems.
HPE’s advisory highlights that these vulnerabilities impact hardware, mobility solutions such as conductors and gateways, access points, and virtual machines compatible with the affected operating systems.
Recommendations and Precautions
To mitigate the risk of exploitation, HPE advises restricting CLI and web-based management interfaces to dedicated network segments or VLANs. Implementing firewall policies and accounting controls is also recommended to improve security and monitor user activities.
Although HPE reports no known instances of these vulnerabilities being exploited in the wild, they strongly encourage users to apply the newly released patches promptly.
As cybersecurity threats evolve, maintaining up-to-date systems with the latest security patches is essential for protecting organizational infrastructure.
