TWCERT: Multiple High-Risk Vulnerabilities in HPE Networking AOS-10 and AOS-8 Require Prompt Patching

On 2026-11-06, TWCERT/CC reported multiple high-risk vulnerabilities in HPE Networking AOS-10 and AOS-8, including authentication bypass, buffer overflow, SQL injection, command injection, and sensitive information disclosure ^[1]. In the most severe cases, an unauthenticated remote attacker could bypass existing authentication controls and execute arbitrary commands with root privileges on the underlying operating system ^[1]. Official patches have been released, and TWCERT urges administrators to remediate promptly in accordance with vendor guidance ^[1].

Organisations running: HPE Networking HPE Networking AOS-10 / AOS-8

Official patches have been released, and TWCERT urges administrators to remediate promptly in accordance with vendor guidance ^[1].