Running Aruba Wi-Fi? HPE Just Patched 33 Critical Flaws in AOS-8 and AOS-10
HPE released fixes for 72 vulnerabilities in the operating systems behind Aruba access points, controllers and gateways, including eight rated the maximum 10.0. Here's what a business running Aruba Wi-Fi should do this week.
- aruba
- hpe
- wifi
- wireless
- access-points
- firmware
- patching
- network-security
- smb
- managed-it
If your office Wi-Fi runs on HPE Aruba access points, controllers or gateways, it's time to schedule a firmware update. On October 22, 2026, HPE published security bulletin HPESBNW05162 fixing 72 vulnerabilities in AOS-8 and AOS-10, the wireless operating systems that run Aruba gear. SecurityWeek reported on October 27 that 33 of them are rated critical, and eight carry the maximum 10.0 score.
Why it matters
The worst of these bugs could let an attacker who never logs in run commands on the device, get around the admin login, or take over the system completely. One of the 10.0 flaws, CVE-2026-79844, is an authentication bypass in AOS-10 that can lead to remote code execution. Your access points and controllers sit between every laptop, phone and camera on the network, so a compromised one is a foothold into everything else.
HPE says it isn't aware of any attacks using these flaws yet and that it found them through its own internal research. That's the good news: there's a window to patch before someone builds an exploit.
What to do this week
- Find out what you're running. Check the AOS version on your Aruba controllers, gateways and access points, including Instant APs.
- Upgrade to a fixed release: AOS-10 to 10.8.1.2, 10.7.2.7 or 10.4.1.14, and AOS-8 to 8.13.3.1 or 8.10.0.24. HPE notes that all hardware and virtual machines compatible with the affected versions are affected.
- Lock down the management screens. HPE recommends keeping the CLI and web admin interfaces on a dedicated management VLAN or behind firewall rules, never open to guest Wi-Fi or the internet.
- Schedule the update after hours. Access points reboot during an upgrade, so plan a short maintenance window and confirm every AP comes back online afterward.
- Not on Aruba? The same habit applies to any Wi-Fi brand: keep a list of your network gear, its firmware version, and when it was last updated.
Nice2GeekYou is based in San Antonio, serving all of Texas, and we install and maintain business Wi-Fi, access points and network gear on site. Our managed IT plans also cover remote clients across the U.S. Request a quote, see our monthly plans, or text us at (210) 504-8969.
Sources: HPE Security Bulletin HPESBNW05162 — Multiple Vulnerabilities in HPE Networking Wireless Operating Systems (AOS-10 & AOS-8) (Oct 22, 2026); SecurityWeek — HPE Patches Dozens of Critical Flaws in Networking Products (Oct 27, 2026); CVE-2026-79844 record.