Vendor
Hpe vulnerabilities
Updated . Rebuilt every hour.
Junglewise Threat Intelligence has tracked 214 vulnerabilities in Hpe: 8 in the last 7 days and 201 in the last 90 days, 31 of them critical and 0 exploited in the wild. The most recent, CVE-2026-95786, was published on 10 November 2026. 66 vulnerabilities in the last four weeks, down 4% on the four before (69). 3 critical against 20. 12 technologies have a page of their own.
- Last 7 days
- 8
- Last 90 days
- 201
- Critical, all time
- 31
- Exploited in the wild
- 0
About Hpe
A multinational information technology company that provides enterprise hardware, software, and cloud services.
Hpe technologies
Latest Hpe vulnerabilities
- CVE-2026-95786: HPE system interface authorization enforcement bypassmediumCVSS 6.5
- CVE-2026-95785: HPE system component unauthorized modification vulnerabilityhighCVSS 7.2
- CVE-2026-95783: Network-facing component denial of servicehighCVSS 7.5
- CVE-2026-95782: HPE monitoring component security control bypasshighCVSS 7.5
- CVE-2026-95781: HPE AthonetOS unauthorized access to protected functionshighCVSS 7.5
- CVE-2026-95780: Authentication and session-management access termination failurehighCVSS 8.1
- CVE-2026-95779: HPE Morpheus Manager confidential certificate exposurehighCVSS 8.8
- CVE-2026-95778: HPE Morpheus Software remote code executionhighCVSS 8.8
- CVE-2026-44875: HPE Cray Programming Environment privilege escalationinfo
- CVE-2026-95772: HPE Networking Fabric Composer API race conditionmediumCVSS 4.2
- CVE-2026-95771: HPE Networking Fabric Composer information disclosure in APImediumCVSS 4.3
- CVE-2026-95770: HPE Networking Fabric Composer information disclosure in OSmediumCVSS 4.7
- CVE-2026-95769: HPE Networking Fabric Composer audit log spoofingmediumCVSS 5.3
- CVE-2026-95768: HPE Networking Fabric Composer API privilege escalationmediumCVSS 5.3
- CVE-2026-95767: HPE Networking Fabric Composer API information disclosuremediumCVSS 5.3
- CVE-2026-95766: HPE Networking Fabric Composer sensitive information disclosuremediumCVSS 5.3
- CVE-2026-95765: HPE Networking Fabric Composer information disclosure in web management interfacemediumCVSS 5.4
- CVE-2026-95764: HPE Networking Fabric Composer API improper certificate validationmediumCVSS 5.7
- CVE-2026-95763: HPE Networking Fabric Composer improper certificate validationmediumCVSS 5.9
- CVE-2026-95762: HPE Networking Fabric Composer insufficient session expiration in APImediumCVSS 5.9
- CVE-2026-95761: HPE Networking Fabric Composer improper certificate validationmediumCVSS 5.9
- CVE-2026-95760: HPE Networking Fabric Composer API privilege escalationmediumCVSS 6.4
- CVE-2026-95759: HPE Networking Fabric Composer audit log bypass in APImediumCVSS 6.5
- CVE-2026-95758: HPE Networking Fabric Composer API authorization bypassmediumCVSS 6.5
- CVE-2026-95757: HPE Networking Fabric Composer local authentication bypassmediumCVSS 6.5
Most severe Hpe vulnerabilities
Exploited in the wild first, then by severity and CVSS score.
- CVE-2026-76658: HPE Networking Fabric Composer SSH daemon auth bypasscriticalCVSS 10EPSS 0.8%
- CVE-2026-76657: HPE Networking Fabric Composer API authentication bypasscriticalCVSS 10EPSS 0.8%
- CVE-2026-76672: HPE SD-WAN Orchestrator sensitive information disclosurecriticalCVSS 9.9EPSS 0.5%
- CVE-2026-76670: HPE EdgeConnect SD-WAN Orchestrator API privilege escalationcriticalCVSS 9.9EPSS 0.5%
- CVE-2026-76669: HPE EdgeConnect SD-WAN Orchestrator API privilege escalationcriticalCVSS 9.9EPSS 0.5%
- CVE-2026-76674: HPE EdgeConnect SD-WAN Gateway buffer overflowcriticalCVSS 9.8EPSS 1.0%
- CVE-2026-23600: HPE AutoPass License Server remote authentication bypasscriticalCVSS 9.8EPSS 1.0%
- CVE-2026-63456: HPE Networking SD-WAN Orchestrator REST API authentication bypasscriticalCVSS 9.8EPSS 0.8%
- CVE-2026-63455: HPE Networking SD-WAN Orchestrator REST API authentication bypasscriticalCVSS 9.8EPSS 0.8%
- CVE-2026-76709: HPE Analytics and Location Engine remote write accesscriticalCVSS 9.8EPSS 0.6%
Vulnerabilities per week
66 vulnerabilities in the last four weeks, down 4% on the four before (69). 3 critical against 20. The last 13 weeks, by the week each vulnerability was published.
| Week of | Bar | Vulns | Critical |
|---|---|---|---|
| 17 Aug 2026 | 0 | 0 | |
| 24 Aug 2026 | 0 | 0 | |
| 31 Aug 2026 | 53 | 5 | |
| 7 Sep 2026 | 5 | 0 | |
| 14 Sep 2026 | 19 | 4 | |
| 21 Sep 2026 | 9 | 2 | |
| 28 Sep 2026 | 18 | 5 | |
| 5 Oct 2026 | 23 | 9 | |
| 12 Oct 2026 | 12 | 0 | |
| 19 Oct 2026 | 3 | 0 | |
| 26 Oct 2026 | 0 | 0 | |
| 2 Nov 2026 | 51 | 3 | |
| 9 Nov 2026 | 8 | 0 |
Embed a badge
A live badge for a README, a status page or an internal wiki: how many Hpe vulnerabilities were published in the last 7 days and how many of them are critical, refreshed hourly.
[](https://junglewise.ai/threats/vendors/hpe)<a href="https://junglewise.ai/threats/vendors/hpe"><img src="https://junglewise.ai/threats/vendors/hpe/badge.svg" alt="Hpe vulnerabilities" /></a>How this is built
Junglewise Threat Intelligence collects vulnerabilities from NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories, and matches each one to the technologies and vendors it affects. Dates are the date a vulnerability was published, in UTC.
The pages are rebuilt from the database every hour. Frozen weekly and monthly reports never change once published, so they can be cited.
Use this data
The same data is at https://junglewise.ai/threats/vendors/hpe.json, and this page as text at https://junglewise.ai/threats/vendors/hpe.md, for scripts and language models. It is free to reuse under CC BY 4.0 with a link back to this page.
Cite as: Junglewise Threat Intelligence, "Hpe vulnerabilities", https://junglewise.ai/threats/vendors/hpe, 13 November 2026.