HPE PATCHES CRITICAL ARUBAOS-CX CODE EXECUTION FLAW

INDUSTRY DESK■ 1 MIN READ

FRI, SEP 4, 2026

■ AI-SUMMARIZED FROM 1 SOURCE ▸ TIMELINE

Hewlett Packard Enterprise has released a patch for a critical remote code execution vulnerability in ArubaOS-CX, its network operating system used in enterprise switches and wireless controllers.

The vulnerability allows attackers to execute arbitrary code remotely on affected devices without authentication. HPE rated the flaw as critical, indicating it poses significant risk to network infrastructure. ArubaOS-CX runs on HPE's portfolio of networking hardware, including Aruba CX switches and controllers widely deployed in enterprise environments. The patch addresses the vulnerability across supported versions of the operating system. HPE advises users to apply updates immediately. The company provided patch availability through its standard support channels. Organizations running ArubaOS-CX should prioritize deployment of the fix to their network devices. Details on the specific attack vector and affected version ranges are available through HPE's security advisory. The patch is part of HPE's regular security update cycle for its networking products.

■ SOURCES

► Bleeping Computer

■ SUMMARY WRITTEN BY AI FROM THE LINKS ABOVE

■ MORE FROM THE SECURITY DESK

P412GOOGLE PATCHES CHROME ZERO-DAY ACTIVELY EXPLOITED

Google has released an emergency update for Chrome to fix a high-severity zero-day vulnerability in the V8 engine currently being exploited in attacks. The update addresses this flaw plus 11 additional vulnerabilities.

1H AGO— Security Desk

P402US MILITARY DISABLES AD TRACKERS ON DEVICES

U.S. military branches have disabled advertising trackers on government-issued phones and computers following reports that location data from these trackers was being used to target American forces in the Middle East.

2H AGO— Industry Desk

P398SERBIA'S LARGEST SPYWARE WAVE TARGETS CIVIL SOCIETY

At least 14 people across Serbian civil society were infected with advanced spyware in what digital rights group Share Foundation calls the country's largest documented surveillance wave. Student protesters were among those targeted, though the government of Aleksandar Vučić denies involvement.

3H AGO— Security Desk

P397ID VERIFICATION FIRM EXPOSED TO YEAR-LONG HACKER ACCESS

An identity verification company left its systems exposed, allowing hackers real-time access to scan data for over 12 months. The breach potentially affected millions of users whose identification documents were processed through the platform.

3H AGO— Security Desk

◄ BACK TO NEWS

HPE PATCHES CRITICAL ARUBAOS-CX CODE EXECUTION FLAW

■ MORE FROM THE SECURITY DESK

■ SUBSCRIBE TO THE DAILY BRIEF