HPE patches eight max severity RCE and auth bypass AOS flaws

Eight maximum-severity vulnerabilities in HPE's ArubaOS expose enterprise network infrastructure to unauthenticated remote code execution and authentication bypass — both achievable through low-complexity attacks, meaning even less-skilled threat actors can exploit them. These flaws affect the operating system underpinning Aruba networking devices, which are widely deployed in enterprise and critical environments, dramatically amplifying the blast radius. The fact that HPE explicitly recommends network segmentation and firewall policies as interim mitigations underscores that patching alone cannot always be the first line of defense. Delayed patch application in environments running unpatched Aruba devices leaves organizations exposed to full network compromise with minimal attacker effort.