HPE PATCHES CRITICAL ARUBAOS-CX CODE EXECUTION FLAW

INDUSTRY DESK■ 1 MIN READ

FRI, SEP 4, 2026

■ AI-SUMMARIZED FROM 1 SOURCE ▸ TIMELINE

Hewlett Packard Enterprise has released a patch for a critical remote code execution vulnerability in ArubaOS-CX, its network operating system used in enterprise switches and wireless controllers.

The vulnerability allows attackers to execute arbitrary code remotely on affected devices without authentication. HPE rated the flaw as critical, indicating it poses significant risk to network infrastructure. ArubaOS-CX runs on HPE's portfolio of networking hardware, including Aruba CX switches and controllers widely deployed in enterprise environments. The patch addresses the vulnerability across supported versions of the operating system. HPE advises users to apply updates immediately. The company provided patch availability through its standard support channels. Organizations running ArubaOS-CX should prioritize deployment of the fix to their network devices. Details on the specific attack vector and affected version ranges are available through HPE's security advisory. The patch is part of HPE's regular security update cycle for its networking products.

■ SOURCES

► Bleeping Computer

■ SUMMARY WRITTEN BY AI FROM THE LINKS ABOVE

■ MORE FROM THE SECURITY DESK

P424CROWDSTRIKE ZERO-DAY LETS ATTACKERS GAIN SYSTEM ACCESS

A researcher known as Nightmare Eclipse has disclosed a CrowdStrike Falcon zero-day exploit called FalconFlank that enables privilege escalation on fully patched Windows systems. The vulnerability affects the widely-deployed endpoint protection software.

JUST NOW— Security Desk

P421US MILITARY DISABLES AD TRACKING ON TROOPS' DEVICES

The U.S. military has disabled ad tracking on service members' devices after foreign adversaries exploited location data to target troops. A senator's letter confirms the action was taken in response to security threats.

JUST NOW— Industry Desk

P412GOOGLE PATCHES CHROME ZERO-DAY ACTIVELY EXPLOITED

Google has released an emergency update for Chrome to fix a high-severity zero-day vulnerability in the V8 engine currently being exploited in attacks. The update addresses this flaw plus 11 additional vulnerabilities.

2H AGO— Security Desk

P402US MILITARY DISABLES AD TRACKERS ON DEVICES

U.S. military branches have disabled advertising trackers on government-issued phones and computers following reports that location data from these trackers was being used to target American forces in the Middle East.

3H AGO— Industry Desk

◄ BACK TO NEWS

HPE PATCHES CRITICAL ARUBAOS-CX CODE EXECUTION FLAW

■ MORE FROM THE SECURITY DESK

■ SUBSCRIBE TO THE DAILY BRIEF