HPE patches eight max severity RCE and auth bypass AOS flaws
Teaser from the source
Hewlett Packard Enterprise (HPE) released security updates to patch 72 vulnerabilities in the Aruba Operating System (ArubaOS), including eight maximum-severity authentication bypass and code execution issues. [...]
This is the RSS-feed teaser. Read the full article at the original source.
Read at BleepingComputerMore on severity
Other advisories
- Not ratedosv:CVE-2026-111045CLI Bridge: High-severity sandbox escape via dangling symlink
- CriticalCVE-2026-102255SonicWall SMA1000: max-severity pre-auth SSRF exploited days after the patch (CVE-2026-102255)
- CriticalCVE-2026-86950High-Severity Vulnerability in Apple Products
- CriticalCVE-2026-87902Active Exploitation of High-Severity Vulnerability in WordPress
- CriticalCVE-2026-82067High-Severity Vulnerability in MongoDB Server
- MediumCVE-2026-87564Type confusion in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: High)
- HighCVE-2026-87587Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
- HighCVE-2026-87612Type confusion in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Other news entries
- Attackers Exploit Critical Siemens IoT2050 Flaw to Plant Remote Command BackdoorsNewsThe Hacker News
- Attackers Target Unpatched CryptoPayment Gateway Flaw That Can Expose Wallet CredentialsNewsThe Hacker News
- Max-severity bug in widely used OT programming tool exploited to deliver Linux malwareNewsThe Register — Security
- Over 1,000 GitLab servers vulnerable to ongoing RCE attacksNewsBleepingComputer
- WordPress RCE Flaw Draws Nearly 63,000 Attack Attempts in Just 24 HoursNewsThe Hacker News
- CISA says max severity GitLab flaw now exploited in the wildNewsBleepingComputer
- Fresh WordPress Vulnerability in Attackers’ CrosshairsNewsSecurityWeek
- Max-Severity GitLab Vulnerability Exploited Against Alpine LinuxNewsSecurityWeek
ID