# Hewlett Packard Enterprise vulnerabilities

Source: https://junglewise.ai/threats/vendors/hewlett-packard-enterprise  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Updated: 9 November 2026, 03:07 UTC. Rebuilt every hour.  
Data: https://junglewise.ai/threats/vendors/hewlett-packard-enterprise.json  
License: CC BY 4.0 with a link back

Junglewise Threat Intelligence has tracked 13 vulnerabilities in Hewlett Packard Enterprise: 0 in the last 7 days and 10 in the last 90 days, 8 of them critical and 3 exploited in the wild. The most recent, CVE-2026-79815, was published on 6 October 2026. Nothing in the last four weeks, down from 9 vulnerabilities in the four before. 0 critical against 5. 3 technologies have a page of their own.

## Counts

- Last 7 days: 0
- Last 30 days: 0
- Last 90 days: 10
- All time: 13 (8 critical, 3 exploited in the wild)

## About Hewlett Packard Enterprise

Enterprise-focused information technology infrastructure and services vendor.

## Latest Hewlett Packard Enterprise vulnerabilities

- [CVE-2026-79815: Hewlett Packard Enterprise ClearPass Policy Manager OnGuard command injection](https://junglewise.ai/threats/cve-2026-79815-a-command-injection-vulnerability-in-the-onguard-agent-of) (medium, CVSS 6.5, published 6 Oct 2026)
- [CVE-2026-79798: Hewlett Packard Enterprise ClearPass Policy Manager SQL injection](https://junglewise.ai/threats/cve-2026-79798-sql-injection-vulnerabilities-in-the-web-based-management) (critical, CVSS 9.9, published 6 Oct 2026)
- [CVE-2026-79794: Hewlett Packard Enterprise ClearPass Policy Manager SQL injection in management interface](https://junglewise.ai/threats/cve-2026-79794-a-sql-injection-vulnerability-in-the-web-based-management) (critical, CVSS 9.1, published 6 Oct 2026)
- [CVE-2026-76745: Hewlett Packard Enterprise AOS-S memory corruption remote code execution](https://junglewise.ai/threats/cve-2026-76745-memory-corruption-vulnerabilities-exist-in-aos-s-that-are) (critical, CVSS 9.6, published 6 Oct 2026)
- [CVE-2026-76704: Hewlett Packard Enterprise EdgeConnect SD-WAN Orchestrator stored XSS in web management interface](https://junglewise.ai/threats/cve-2026-76704-a-vulnerability-in-the-web-based-management-interface-of-the) (medium, CVSS 5.5, published 15 Sep 2026)
- [CVE-2026-76688: Hewlett Packard Enterprise EdgeConnect SD-WAN Orchestrator auth bypass in management interface](https://junglewise.ai/threats/cve-2026-76688-vulnerabilities-have-been-identified-in-the-web-based-management) (high, CVSS 7.5, published 15 Sep 2026)
- [CVE-2026-76681: Hewlett Packard Enterprise EdgeConnect SD-WAN Orchestrator API privilege escalation](https://junglewise.ai/threats/cve-2026-76681-a-vulnerability-in-the-api-of-edgeconnect-sd-wan-orchestrator) (high, CVSS 8.5, published 15 Sep 2026)
- [CVE-2026-76675: Hewlett Packard Enterprise EdgeConnect command injection in CLI](https://junglewise.ai/threats/cve-2026-76675-hewlett-packard-enterprise-edgeconnect-command-injection-in-cli) (critical, CVSS 9.1, published 15 Sep 2026)
- [CVE-2026-76673: Hewlett Packard Enterprise EdgeConnect SD-WAN Orchestrator authentication bypass in API](https://junglewise.ai/threats/cve-2026-76673-vulnerabilities-have-been-identified-in-the-api-of-edgeconnect-sd) (critical, CVSS 9.8, published 15 Sep 2026)
- [CVE-2026-73786: Hewlett Packard Enterprise CPPM DoS in web management interface](https://junglewise.ai/threats/cve-2026-73786-hewlett-packard-enterprise-cppm-dos-in-web-management-interface) (high, CVSS 7.5, published 9 Sep 2026)
- [CVE-2025-37164: HPE OneView code injection remote code execution](https://junglewise.ai/threats/cve-2025-37164-hpe-oneview-code-injection-remote-code-execution) (critical, exploited in the wild, CVSS 10, published 7 Jan 2026)
- [CVE-2005-2773: HP OpenView Network Node Manager Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2005-2773-hp-openview-network-node-manager-remote-code-execution) (critical, exploited in the wild, CVSS 9.8, published 25 Mar 2022)
- [CVE-2013-4810: HP Multiple Products Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2013-4810-hp-multiple-products-remote-code-execution-vulnerability) (critical, exploited in the wild, CVSS 9.8, published 25 Mar 2022)

## Most severe Hewlett Packard Enterprise vulnerabilities

- [CVE-2025-37164: HPE OneView code injection remote code execution](https://junglewise.ai/threats/cve-2025-37164-hpe-oneview-code-injection-remote-code-execution) (critical, exploited in the wild, CVSS 10, published 7 Jan 2026)
- [CVE-2005-2773: HP OpenView Network Node Manager Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2005-2773-hp-openview-network-node-manager-remote-code-execution) (critical, exploited in the wild, CVSS 9.8, published 25 Mar 2022)
- [CVE-2013-4810: HP Multiple Products Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2013-4810-hp-multiple-products-remote-code-execution-vulnerability) (critical, exploited in the wild, CVSS 9.8, published 25 Mar 2022)
- [CVE-2026-79798: Hewlett Packard Enterprise ClearPass Policy Manager SQL injection](https://junglewise.ai/threats/cve-2026-79798-sql-injection-vulnerabilities-in-the-web-based-management) (critical, CVSS 9.9, published 6 Oct 2026)
- [CVE-2026-76673: Hewlett Packard Enterprise EdgeConnect SD-WAN Orchestrator authentication bypass in API](https://junglewise.ai/threats/cve-2026-76673-vulnerabilities-have-been-identified-in-the-api-of-edgeconnect-sd) (critical, CVSS 9.8, published 15 Sep 2026)
- [CVE-2026-76745: Hewlett Packard Enterprise AOS-S memory corruption remote code execution](https://junglewise.ai/threats/cve-2026-76745-memory-corruption-vulnerabilities-exist-in-aos-s-that-are) (critical, CVSS 9.6, published 6 Oct 2026)
- [CVE-2026-76675: Hewlett Packard Enterprise EdgeConnect command injection in CLI](https://junglewise.ai/threats/cve-2026-76675-hewlett-packard-enterprise-edgeconnect-command-injection-in-cli) (critical, CVSS 9.1, published 15 Sep 2026)
- [CVE-2026-79794: Hewlett Packard Enterprise ClearPass Policy Manager SQL injection in management interface](https://junglewise.ai/threats/cve-2026-79794-a-sql-injection-vulnerability-in-the-web-based-management) (critical, CVSS 9.1, published 6 Oct 2026)
- [CVE-2026-76681: Hewlett Packard Enterprise EdgeConnect SD-WAN Orchestrator API privilege escalation](https://junglewise.ai/threats/cve-2026-76681-a-vulnerability-in-the-api-of-edgeconnect-sd-wan-orchestrator) (high, CVSS 8.5, published 15 Sep 2026)
- [CVE-2026-73786: Hewlett Packard Enterprise CPPM DoS in web management interface](https://junglewise.ai/threats/cve-2026-73786-hewlett-packard-enterprise-cppm-dos-in-web-management-interface) (high, CVSS 7.5, published 9 Sep 2026)

## Vulnerabilities per week

Nothing in the last four weeks, down from 9 vulnerabilities in the four before. 0 critical against 5.

| Week of | Vulns | Critical | Exploited |
| --- | --- | --- | --- |
| 17 Aug 2026 | 0 | 0 | 0 |
| 24 Aug 2026 | 0 | 0 | 0 |
| 31 Aug 2026 | 0 | 0 | 0 |
| 7 Sep 2026 | 1 | 0 | 0 |
| 14 Sep 2026 | 5 | 2 | 0 |
| 21 Sep 2026 | 0 | 0 | 0 |
| 28 Sep 2026 | 0 | 0 | 0 |
| 5 Oct 2026 | 4 | 3 | 0 |
| 12 Oct 2026 | 0 | 0 | 0 |
| 19 Oct 2026 | 0 | 0 | 0 |
| 26 Oct 2026 | 0 | 0 | 0 |
| 2 Nov 2026 | 0 | 0 | 0 |
| 9 Nov 2026 | 0 | 0 | 0 |

## Hewlett Packard Enterprise technologies

- [Hewlett Packard Enterprise EdgeConnect SD-WAN Gateways](https://junglewise.ai/threats/technologies/edgeconnect-sd-wan-gateways): 4 vulnerabilities
- [Hewlett Packard Enterprise EdgeConnect SD-WAN Orchestrator](https://junglewise.ai/threats/technologies/hewlett-packard-enterprise-edgeconnect-sd-wan-orchestrator): 4 vulnerabilities
- [Hewlett Packard Enterprise ClearPass Policy Manager](https://junglewise.ai/threats/technologies/hewlett-packard-enterprise-clearpass-policy-manager): 3 vulnerabilities

## Sources

NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Hewlett Packard Enterprise vulnerabilities", https://junglewise.ai/threats/vendors/hewlett-packard-enterprise, 9 November 2026.