CVE-2026-23813

CVE-2026-23813 — Contournement de l'authentification avant authentification AOS-CX Des attaquants distants non authentifiés peuvent accéder à l'API REST de gestion AOS-CX en faisant transiter clandestinement un jeton login via l'expression régulière de version trop permissive de nginx, exposant...

HPESBHF05107 rev.2 - HPE ProLiant DL/ML/XD/XL, Alletra, Apollo, Edgeline, and Synergy Server Using Certain Intel Processors, INTEL-SA-01437, Intel UEFI Firmware Advisory, Disclosure of Information Vulnerability

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Alletra Storage Server 4210 - Prior to BIOS v1.8005-292026 HPE ProLiant Compute DL110 Gen12 - Prior to BIOS v1.8005-292026 HPE ProLiant Compute DL320 Gen12 - Prior to BI...

HPESBHF05069 rev.1 - HPE Cray XD670 Server Using Certain Intel Processors, INTEL-SA-01419, 2026.2 IPU, Intel Trust Domain Extensions (Intel TDX) module Advisory

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Cray XD670 - Prior to 2.09 HFP 2026.05.00 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2025-31356 |...

HPESBHF05116 rev.2 - HPE ProLiant DL/ML/XD, Alletra, Edgeline, and Synergy Server Using Certain Intel Processors, INTEL-SA-01439, Intel Xeon processor with Alias Checking Trusted Module Advisory, Local Escalation of Privilege

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Alletra Storage Server 4210 - Prior to BIOS v1.8005-29-2026 HPE ProLiant Compute DL110 Gen12 - Prior to BIOS v1.5007-24-2026 HPE ProLiant Compute DL320 Gen12 - Prior to BI...

HPESBHF05097 rev.1 - HPE ProLiant DL/ML/XD, Alletra, and Synergy Server Using Certain Intel Processors, INTEL-SA-01404, Intel Xeon 6 processor with Intel TDX Advisory, Local Disclosure of Information Vulnerability

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Alletra Storage Server 4210 - Prior to v1.8005-29-2026 HPE ProLiant Compute DL110 Gen12 - Prior to v1.5007-24-2026 HPE ProLiant Compute DL320 Gen12 - Prior to...

HPESBHF05106 rev.1 - HPE ProLiant DL/ML/XD, Alletra, and Synergy servers Using Certain Intel Processors, INTEL-SA-01435, UPLR4, Intel Processor Firmware Advisory, Local Escalation of Privilege Vulnerability

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Alletra Storage Server 4210 - Prior to v1.8005-29-2026 HPE ProLiant Compute DL110 Gen12 - Prior to v1.5007-24-2026 HPE ProLiant Compute DL320 Gen12 - Prior to...

HPESBHF05101 rev.2 - HPE ProLiant DL/ML/XD, Alletra, Edgeline, and Synergy Server Using Certain Intel Processors, INTEL-SA-01436, Intel Trust Domain Extensions (Intel TDX) module Advisory, Multiple Vulnerabilities

Potential Security Impact: Local: Denial of Service DoS, Disclosure of Information, Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Alletra Storage Server 4210 - Prior to BIOS v1.8005-29-2026 HPE ProLiant Compute DL110 Gen12 - Prior to BIOS...

HPESBHF05092 rev.1 - HPE StoreEasy Servers Using Certain Intel Processors, INTEL-SA-01419, 2026.2 IPU, Intel Trust Domain Extensions (Intel TDX) module Advisory, Local Disclosure of Information Vulnerability

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE StoreEasy 1470 Performance - Prior to v2.9004-30-2026 HPE StoreEasy 1470 Storage - Prior to v2.9004-30-2026 HPE StoreEasy 1570 Performance - Prior to v2.9004-30-2026 HPE...

HPESBHF05099 rev.1 - HPE ProLiant DL/ML/XD, Alletra, and Synergy servers Using Certain Intel Processors, INTEL-SA-01428, Intel Processor Firmware Advisory, Local Escalation of Privilege Vulnerability

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Alletra Storage Server 4210 - Prior to v1.8005-29-2026 HPE ProLiant Compute DL110 Gen12 - Prior to v1.5007-24-2026 HPE ProLiant Compute DL320 Gen12 - Prior to...

HPESBHF05089 rev.1 - HPE ProLiant DL/ML/XD, Alletra, Edgeline, and Synergy Server Using Certain Intel Processors, INTEL-SA-01419, 2026.2 IPU, Intel Trust Domain Extensions (Intel TDX) module Advisory, Local Disclosure of Information Vulnerability

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Alletra Storage Server 4210 - Prior to v1.8005-29-2026 HPE ProLiant Compute DL110 Gen12 - Prior to v1.5007-24-2026 HPE ProLiant Compute DL320 Gen12 - Prior to...

HPESBHF05117 rev.2 - HPE ProLiant DL/ML/XD, Alletra, Edgeline, and Synergy Server Using Certain Intel Processors, INTEL-SA-01442, Intel Xeon Processor Firmware Advisory, Local Escalation of Privilege

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Alletra Storage Server 4210 - Prior to BIOS v1.8005-29-2026 HPE ProLiant Compute DL110 Gen12 - Prior to BIOS v1.5007-24-2026 HPE ProLiant Compute DL320 Gen12 - Prior to BI...

HPESBHF05096 rev.1 - HPE ProLiant DL/ML/XD, Alletra and Synergy Server Using Certain Intel Processors, INTEL-SA-01379, Intel Xeon 6 Processor Firmware Advisory, Local Escalation of Privilege Vulnerability

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Alletra Storage Server 4210 - Prior to v1.8005-29-2026 HPE ProLiant Compute DL110 Gen12 - Prior to 1.5007-24-2026 HPE ProLiant Compute DL320 Gen12 - Prior to v1.8005-29-20...

HPESBHF05068 rev.1 - HPE Cray XD670 Server Using AMI BIOS, Multiple Vulnerabilities

Potential Security Impact: Local: Arbitrary Code Execution, Denial of Service DoS, Disclosure of Information, Escalation of Privilege, Unauthorized Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Cray XD670 - Prior to 2.09 HFP 2026.05.00 CVSS Scores: | CVE | CVS...

HPESBNW05119 rev.1 - Multiple Vulnerabilities in HPE Aruba Networking Private 5G Core

Potential Security Impact: Remote: Access Restriction Bypass, Authentication Bypass, Escalation of Privilege, Gain Unauthorized Access SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Aruba Networking Private 5G Core 1.26.1.2 and prior CVSS Scores: | CVE | CVSS Vector | Base...

HPESBHF05066 rev.1 - HPE Cray XD670 Server Using Certain Intel Processors, INTEL-SA-01396, 2026.1 IPU, Intel Processor Firmware Advisory, Local Escalation of Privilege Vulnerability

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Cray XD670 - Prior to 2.09 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2025-31648 | CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N | 3.9 |...

CVE-2026-63457

A potential denial of service vulnerability exists in HPE Integrated Lights-Out 6 iLO 6 prior to v1.78...

CVE-2026-63457

Technical details such as root cause, exact exploitability, and remediation are not provided in the supplied documents. The available info only notes a potential DoS in HPE iLO 6 before v1.78. Monitor for updates.

CVE-2026-63455

Multiple vulnerabilities in the REST API interface of HPE Networking SD-WAN Orchestrator could allow an unauthenticated remote attacker to bypass web authentication mechanisms and access system functions. Successful exploitation could allow an attacker to view and modify potentially sensitive...

CVE-2026-63456

Multiple vulnerabilities in the REST API interface of HPE Networking SD-WAN Orchestrator could allow an unauthenticated remote attacker to bypass web authentication mechanisms and access system functions. Successful exploitation could allow an attacker to view and modify potentially sensitive...

EUVD-2026-52790

Multiple vulnerabilities in the REST API interface of HPE Networking SD-WAN Orchestrator could allow an unauthenticated remote attacker to bypass web authentication mechanisms and access system functions. Successful exploitation could allow an attacker to view and modify potentially sensitive...