Serial number: AV26-1046
Date: October 15, 2026
As of October 15, 2026, Hewlett Packard Enterprise is affected by vulnerabilities in the following products:
- HPE NonStop HTTP WEBSERVER
- Version T1144L24^AAL and prior
- HPE NonStop Servers
- Multiple versions and models
- HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers
- Versions prior to 3.22
- HPE Integrated Lights-Out 6 (iLO 6)
- Versions prior to 1.79
- HPE Integrated Lights-Out 7 (iLO 7)
- Version prior to 1.25.01
- HPE Networking AOS-Switch (AOS-S)
- Version AOS-S 16.11.0031 and prior
The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.
- HPESBNS05148 rev.1 - HPE NonStop Servers, Multiple Vulnerabilities
- HPESBHF05170 rev.1 - HPE Integrated Lights-Out 7 (iLO 7), Integrated Lights-Out 6 (iLO 6) and Integrated Lights-Out 5 (iLO 5), Multiple Vulnerabilities
- HPESBNW05156 rev 2 - Multiple Vulnerabilities in HPE Networking AOS-Swtich (AOS-S)
- HPE Security Bulletin Library