# Hpe vulnerabilities Source: https://junglewise.ai/threats/vendors/hpe Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 13 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/vendors/hpe.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 214 vulnerabilities in Hpe: 8 in the last 7 days and 201 in the last 90 days, 31 of them critical and 0 exploited in the wild. The most recent, CVE-2026-95786, was published on 10 November 2026. 66 vulnerabilities in the last four weeks, down 4% on the four before (69). 3 critical against 20. 12 technologies have a page of their own. ## Counts - Last 7 days: 8 - Last 30 days: 74 - Last 90 days: 201 - All time: 214 (31 critical, 0 exploited in the wild) ## About Hpe A multinational information technology company that provides enterprise hardware, software, and cloud services. ## Latest Hpe vulnerabilities - [CVE-2026-95786: HPE system interface authorization enforcement bypass](https://junglewise.ai/threats/cve-2026-95786-a-vulnerability-exists-in-a-system-interface-that-may-under) (medium, CVSS 6.5, published 10 Nov 2026) - [CVE-2026-95785: HPE system component unauthorized modification vulnerability](https://junglewise.ai/threats/cve-2026-95785-a-vulnerability-exists-in-a-system-component-that-may-under) (high, CVSS 7.2, published 10 Nov 2026) - [CVE-2026-95783: Network-facing component denial of service](https://junglewise.ai/threats/cve-2026-95783-a-vulnerability-exists-in-a-network-facing-component-that-may) (high, CVSS 7.5, published 10 Nov 2026) - [CVE-2026-95782: HPE monitoring component security control bypass](https://junglewise.ai/threats/cve-2026-95782-a-vulnerability-exists-in-a-monitoring-component-that-may-under) (high, CVSS 7.5, published 10 Nov 2026) - [CVE-2026-95781: HPE AthonetOS unauthorized access to protected functions](https://junglewise.ai/threats/cve-2026-95781-a-security-vulnerability-exists-in-athonetos-that-may-allow-an) (high, CVSS 7.5, published 10 Nov 2026) - [CVE-2026-95780: Authentication and session-management access termination failure](https://junglewise.ai/threats/cve-2026-95780-a-vulnerability-exists-in-the-authentication-and-session) (high, CVSS 8.1, published 10 Nov 2026) - [CVE-2026-95779: HPE Morpheus Manager confidential certificate exposure](https://junglewise.ai/threats/cve-2026-95779-an-exposure-of-the-appliance-s-confidential-certificate) (high, CVSS 8.8, published 9 Nov 2026) - [CVE-2026-95778: HPE Morpheus Software remote code execution](https://junglewise.ai/threats/cve-2026-95778-a-remote-code-execution-vulnerability-exists-in-hpe-morpheus) (high, CVSS 8.8, published 9 Nov 2026) - [CVE-2026-44875: HPE Cray Programming Environment privilege escalation](https://junglewise.ai/threats/cve-2026-44875-in-hpe-cray-programming-environment-versions-25-03-and-25-09) (info, published 5 Nov 2026) - [CVE-2026-95772: HPE Networking Fabric Composer API race condition](https://junglewise.ai/threats/cve-2026-95772-a-race-condition-vulnerability-exists-in-the-api-of-hpe) (medium, CVSS 4.2, published 3 Nov 2026) - [CVE-2026-95771: HPE Networking Fabric Composer information disclosure in API](https://junglewise.ai/threats/cve-2026-95771-an-authenticated-information-disclosure-vulnerability-exists-in) (medium, CVSS 4.3, published 3 Nov 2026) - [CVE-2026-95770: HPE Networking Fabric Composer information disclosure in OS](https://junglewise.ai/threats/cve-2026-95770-a-sensitive-information-disclosure-vulnerability-in-the) (medium, CVSS 4.7, published 3 Nov 2026) - [CVE-2026-95769: HPE Networking Fabric Composer audit log spoofing](https://junglewise.ai/threats/cve-2026-95769-an-audit-log-spoofing-vulnerability-exists-in-the-api-of-hpe) (medium, CVSS 5.3, published 3 Nov 2026) - [CVE-2026-95768: HPE Networking Fabric Composer API privilege escalation](https://junglewise.ai/threats/cve-2026-95768-a-privilege-escalation-vulnerability-exists-in-the-api-of-hpe) (medium, CVSS 5.3, published 3 Nov 2026) - [CVE-2026-95767: HPE Networking Fabric Composer API information disclosure](https://junglewise.ai/threats/cve-2026-95767-an-unauthenticated-information-disclosure-vulnerability-exists-in) (medium, CVSS 5.3, published 3 Nov 2026) - [CVE-2026-95766: HPE Networking Fabric Composer sensitive information disclosure](https://junglewise.ai/threats/cve-2026-95766-sensitive-information-disclosure-vulnerabilities-in-hpe) (medium, CVSS 5.3, published 3 Nov 2026) - [CVE-2026-95765: HPE Networking Fabric Composer information disclosure in web management interface](https://junglewise.ai/threats/cve-2026-95765-a-sensitive-information-disclosure-vulnerability-exists-in-the) (medium, CVSS 5.4, published 3 Nov 2026) - [CVE-2026-95764: HPE Networking Fabric Composer API improper certificate validation](https://junglewise.ai/threats/cve-2026-95764-an-improper-certificate-validation-vulnerability-exists-in-the) (medium, CVSS 5.7, published 3 Nov 2026) - [CVE-2026-95763: HPE Networking Fabric Composer improper certificate validation](https://junglewise.ai/threats/cve-2026-95763-an-improper-certificate-validation-vulnerability-in-hpe) (medium, CVSS 5.9, published 3 Nov 2026) - [CVE-2026-95762: HPE Networking Fabric Composer insufficient session expiration in API](https://junglewise.ai/threats/cve-2026-95762-an-insufficient-session-expiration-vulnerability-exists-in-the) (medium, CVSS 5.9, published 3 Nov 2026) - [CVE-2026-95761: HPE Networking Fabric Composer improper certificate validation](https://junglewise.ai/threats/cve-2026-95761-an-improper-certificate-validation-vulnerability-exists-in-hpe) (medium, CVSS 5.9, published 3 Nov 2026) - [CVE-2026-95760: HPE Networking Fabric Composer API privilege escalation](https://junglewise.ai/threats/cve-2026-95760-a-privilege-escalation-vulnerability-exists-in-the-api-of-hpe) (medium, CVSS 6.4, published 3 Nov 2026) - [CVE-2026-95759: HPE Networking Fabric Composer audit log bypass in API](https://junglewise.ai/threats/cve-2026-95759-audit-log-bypass-vulnerabilities-exist-in-the-api-of-hpe) (medium, CVSS 6.5, published 3 Nov 2026) - [CVE-2026-95758: HPE Networking Fabric Composer API authorization bypass](https://junglewise.ai/threats/cve-2026-95758-an-authorization-bypass-vulnerability-exists-in-the-api-of-hpe) (medium, CVSS 6.5, published 3 Nov 2026) - [CVE-2026-95757: HPE Networking Fabric Composer local authentication bypass](https://junglewise.ai/threats/cve-2026-95757-a-local-authentication-bypass-vulnerability-exists-in-an-api-of) (medium, CVSS 6.5, published 3 Nov 2026) ## Most severe Hpe vulnerabilities - [CVE-2026-76658: HPE Networking Fabric Composer SSH daemon auth bypass](https://junglewise.ai/threats/cve-2026-76658-hpe-networking-fabric-composer-ssh-daemon-auth-bypass) (critical, CVSS 10, published 1 Sep 2026) - [CVE-2026-76657: HPE Networking Fabric Composer API authentication bypass](https://junglewise.ai/threats/cve-2026-76657-hpe-networking-fabric-composer-api-authentication-bypass) (critical, CVSS 10, published 1 Sep 2026) - [CVE-2026-76672: HPE SD-WAN Orchestrator sensitive information disclosure](https://junglewise.ai/threats/cve-2026-76672-a-vulnerability-exists-in-the-sd-wan-orchestrator-that-may-lead) (critical, CVSS 9.9, published 15 Sep 2026) - [CVE-2026-76670: HPE EdgeConnect SD-WAN Orchestrator API privilege escalation](https://junglewise.ai/threats/cve-2026-76670-privilege-escalation-vulnerabilities-exist-in-the-api-of-hpe) (critical, CVSS 9.9, published 15 Sep 2026) - [CVE-2026-76669: HPE EdgeConnect SD-WAN Orchestrator API privilege escalation](https://junglewise.ai/threats/cve-2026-76669-privilege-escalation-vulnerabilities-exist-in-the-api-of-hpe) (critical, CVSS 9.9, published 15 Sep 2026) - [CVE-2026-76674: HPE EdgeConnect SD-WAN Gateway buffer overflow](https://junglewise.ai/threats/cve-2026-76674-hpe-edgeconnect-sd-wan-gateway-buffer-overflow) (critical, CVSS 9.8, published 15 Sep 2026) - [CVE-2026-23600: HPE AutoPass License Server remote authentication bypass](https://junglewise.ai/threats/cve-2026-23600-hpe-autopass-license-server-remote-authentication-bypass) (critical, CVSS 9.8, published 2 Mar 2026) - [CVE-2026-63456: HPE Networking SD-WAN Orchestrator REST API authentication bypass](https://junglewise.ai/threats/cve-2026-63456-hpe-networking-sd-wan-orchestrator-rest-api-authentication-bypass) (critical, CVSS 9.8, published 4 Aug 2026) - [CVE-2026-63455: HPE Networking SD-WAN Orchestrator REST API authentication bypass](https://junglewise.ai/threats/cve-2026-63455-hpe-networking-sd-wan-orchestrator-rest-api-authentication-bypass) (critical, CVSS 9.8, published 4 Aug 2026) - [CVE-2026-76709: HPE Analytics and Location Engine remote write access](https://junglewise.ai/threats/cve-2026-76709-a-vulnerability-exists-in-the-internal-administrative-component) (critical, CVSS 9.8, published 22 Sep 2026) ## Vulnerabilities per week 66 vulnerabilities in the last four weeks, down 4% on the four before (69). 3 critical against 20. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 53 | 5 | 0 | | 7 Sep 2026 | 5 | 0 | 0 | | 14 Sep 2026 | 19 | 4 | 0 | | 21 Sep 2026 | 9 | 2 | 0 | | 28 Sep 2026 | 18 | 5 | 0 | | 5 Oct 2026 | 23 | 9 | 0 | | 12 Oct 2026 | 12 | 0 | 0 | | 19 Oct 2026 | 3 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 51 | 3 | 0 | | 9 Nov 2026 | 8 | 0 | 0 | ## Hpe technologies - [Hpe Networking Fabric Composer](https://junglewise.ai/threats/technologies/networking-fabric-composer): 92 vulnerabilities - [Hpe EdgeConnect SD-WAN Gateway](https://junglewise.ai/threats/technologies/edgeconnect-sd-wan-gateway): 16 vulnerabilities - [Hpe ClearPass Policy Manager](https://junglewise.ai/threats/technologies/hpe-clearpass-policy-manager): 12 vulnerabilities - [Hpe Analytics and Location Engine](https://junglewise.ai/threats/technologies/analytics-and-location-engine): 9 vulnerabilities - [Hpe Networking Instant On](https://junglewise.ai/threats/technologies/networking-instant-on): 9 vulnerabilities - [Hpe Arubaos-Cx](https://junglewise.ai/threats/technologies/arubaos-cx): 6 vulnerabilities - [Hpe AOS-S](https://junglewise.ai/threats/technologies/hpe-aos-s): 5 vulnerabilities - [Hpe ](https://junglewise.ai/threats/technologies/hpe-unknown): 4 vulnerabilities - [Hpe Networking Instant ON APs](https://junglewise.ai/threats/technologies/networking-instant-on-aps): 4 vulnerabilities - [Hpe Networking VIA](https://junglewise.ai/threats/technologies/networking-via): 4 vulnerabilities - [Hpe EdgeConnect SD-WAN Orchestrator](https://junglewise.ai/threats/technologies/hpe-edgeconnect-sd-wan-orchestrator): 3 vulnerabilities - [Hpe OneView](https://junglewise.ai/threats/technologies/hpe-oneview): 3 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Hpe vulnerabilities", https://junglewise.ai/threats/vendors/hpe, 13 November 2026.