CriticalVulnerabilityupdated 27 Oct 2026, 13:17 UTC

HPE networking products have dozens of critical flaws, patched

Attackers could potentially take control of HPE networking equipment remotely, or get past its login screen without a password. Updating the affected devices closes these holes.

Fix available1 source, unconfirmed

Severity	CriticalVulnerability
Being exploited?	UnclearNo reports either way yet
Fix available?	YesUpdate to the latest version · since 27 Oct 2026
How sure is this?	1 source, unconfirmedOnly one publisher so far, details may change

What happened

HPE has released patches for dozens of critical flaws in its networking products, including eight maximum-severity defects that could lead to remote code execution and authentication bypass.

Why it is dangerous: Networking devices sit at the core of a company's network, so a remote takeover could expose or disrupt the traffic and systems behind them. Organisations running affected HPE networking gear are at risk until patched.

Are you affected?

You are affected if you run HPE networking products with firmware or software versions older than the patches HPE released, though the specific products and versions are not listed in the available material.

What to do

Check HPE's security bulletin to identify which of your networking devices are affected
Apply the HPE patches to all affected devices, starting with the eight maximum-severity flaws
Restrict management interface access to trusted administrators until patching is complete

Timeline

27 Oct 2026, 13:13 UTC
Publicly disclosed
27 Oct 2026, 13:13 UTC
Reported by SecurityWeek · SecurityWeek
27 Oct 2026, 13:17 UTC
Picked up by Zero Radar

Sources 1 report, oldest first

Security press established security newsrooms

HPE Patches Dozens of Critical Flaws in Networking ProductsSecurityWeek · 27 Oct 2026, 13:13 UTC

Technical details

ID: ZR-243406f6
Disclosed: 27 Oct 2026, 13:13 UTC
On Zero Radar: 27 Oct 2026, 13:17 UTC (4 min after disclosure)
Last change: 27 Oct 2026, 13:17 UTC

The plain-language parts and the attack diagram were written by an AI model (anthropic/claude-haiku-5.5) from the sources above. Facts like versions, exploitation and dates come from the sources themselves. How Zero Radar works