HPE security advisory (AV26-487)

Serial number: AV26-487
Date: May 20, 2026

On May 19, 2026, HPE published a security advisory to address a vulnerability in the following product:

• HPE Aruba Networking Management Software (Airwave) – version 8.3.0.6 and prior
• HPE Aruba Networking AOS-CX – multiple versions
• HPE Aruba Networking EdgeConnect Orchestrator – all versions
• HPE Aruba Networking Analytics and Location Engine (ALE) – all versions
• HPE Aruba Networking Meridian Asset Tracking – all versions

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

• HPESBNW05059 rev.1 - Status of Copy Fail Vulnerability on HPE Aruba Networking Products (CVE-2026-31431)
• HPE Security Bulletin Library