# Hewlett Packard Enterprise (HPE) vulnerabilities & exploitation > As of 2026-10-25, Threadlinqs tracks 16 Hewlett Packard Enterprise (HPE) CVEs, 0 in the CISA Known Exploited Vulnerabilities catalog, linked to 2 tracked threat campaigns. **Data as of:** 2026-10-25 ## Exploitation timeline Threadlinqs has recorded 16 Hewlett Packard Enterprise (HPE) CVEs published between 2026-03-15 and 2026-09-15. The busiest month was 2026-09 (11 new CVEs). None of them is listed in CISA KEV yet. ## Most exploited vulnerabilities Ranked with CISA KEV listings first, then EPSS exploit probability, then CVSS score. Showing 16 of 16 tracked Hewlett Packard Enterprise (HPE) CVEs. - [CVE-2026-23816](https://intel.threadlinqs.com/cve/CVE-2026-23816) — HIGH 7.2 · EPSS 1.2% · 2026-03-11 - [CVE-2026-23815](https://intel.threadlinqs.com/cve/CVE-2026-23815) — HIGH 7.2 · EPSS 1% · 2026-03-11 - [CVE-2026-73749](https://intel.threadlinqs.com/cve/CVE-2026-73749) — CRITICAL 9.8 · EPSS 0.8% · 2026-09-01 - [CVE-2026-73750](https://intel.threadlinqs.com/cve/CVE-2026-73750) — HIGH 8.8 · EPSS 0.8% · 2026-09-01 - [CVE-2026-23813](https://intel.threadlinqs.com/cve/CVE-2026-23813) — CRITICAL 9.8 · EPSS 0.8% · 2026-03-11 - [CVE-2026-73751](https://intel.threadlinqs.com/cve/CVE-2026-73751) — HIGH 8.8 · EPSS 0.7% · 2026-09-01 - [CVE-2026-73753](https://intel.threadlinqs.com/cve/CVE-2026-73753) — HIGH 8.8 · EPSS 0.7% · 2026-09-01 - [CVE-2026-23814](https://intel.threadlinqs.com/cve/CVE-2026-23814) — HIGH 8.8 · EPSS 0.6% · 2026-03-11 - [CVE-2026-73781](https://intel.threadlinqs.com/cve/CVE-2026-73781) — HIGH 8.4 · EPSS 0.5% · 2026-09-01 - [CVE-2026-73778](https://intel.threadlinqs.com/cve/CVE-2026-73778) — HIGH 8.1 · EPSS 0.5% · 2026-09-01 - [CVE-2026-73752](https://intel.threadlinqs.com/cve/CVE-2026-73752) — HIGH 8.8 · EPSS 0.5% · 2026-09-01 - [CVE-2026-73777](https://intel.threadlinqs.com/cve/CVE-2026-73777) — HIGH 8.1 · EPSS 0.5% · 2026-09-01 - [CVE-2026-73782](https://intel.threadlinqs.com/cve/CVE-2026-73782) — HIGH 8.8 · EPSS 0.4% · 2026-09-01 - [CVE-2026-23817](https://intel.threadlinqs.com/cve/CVE-2026-23817) — MEDIUM 6.5 · EPSS 0.3% · 2026-03-11 - [CVE-2026-73779](https://intel.threadlinqs.com/cve/CVE-2026-73779) — HIGH 8.2 · EPSS 0.2% · 2026-09-01 - [CVE-2026-73780](https://intel.threadlinqs.com/cve/CVE-2026-73780) — HIGH 8.3 · EPSS 0.2% · 2026-09-01 ## Products affected Threadlinqs normalises CPE and CNA product records across all 16 CVEs; 1 distinct Hewlett Packard Enterprise (HPE) product is affected. The most frequently affected: - AOS-CX — 16 CVEs ## Threat activity 2 tracked threat campaigns reference Hewlett Packard Enterprise (HPE) products or exploit Hewlett Packard Enterprise (HPE) CVEs: - [HPE Patches Critical ArubaOS-CX Buffer Overflow (CVE-2026-73749) Enabling Unauthenticated Remote Code Execution](https://intel.threadlinqs.com/threat/TL-2026-2314) — CRITICAL — 2026-09-03 - [HPE Aruba AOS-CX Pre-Auth Admin Password Reset (CVE-2026-23813)](https://intel.threadlinqs.com/threat/TL-2026-0240) — CRITICAL — 2026-03-17 ## How to prioritise Hewlett Packard Enterprise (HPE) patching This order follows the data Threadlinqs holds for Hewlett Packard Enterprise (HPE), not a generic severity checklist: - No Hewlett Packard Enterprise (HPE) CVE is in CISA KEV yet, so rank by exploit probability instead. - Outside KEV, the highest EPSS scores are [CVE-2026-23816](https://intel.threadlinqs.com/cve/CVE-2026-23816) (1.2%), [CVE-2026-23815](https://intel.threadlinqs.com/cve/CVE-2026-23815) (1%), [CVE-2026-73749](https://intel.threadlinqs.com/cve/CVE-2026-73749) (0.8%). - 2 CVEs score Critical and 13 High on CVSS v3 (maximum 9.8, average 8.4); sequence these after KEV and high-EPSS items. - 5 CVEs have a public exploit or proof of concept recorded, which shortens the time from disclosure to attack. ## About this data Vendor attribution comes from the CNA and CPE product records of each CVE, folded to one vendor name; CVSS, EPSS and KEV status are read from the Threadlinqs CVE catalog; campaign and actor links come from tracked threat records. Counts reflect the data as of 2026-10-25 and refresh daily. Canonical: https://intel.threadlinqs.com/vendors/hewlett-packard-enterprise-hpe All vendors: https://intel.threadlinqs.com/vendors Full detection coverage and IOCs via the Threadlinqs MCP server (Purple tier): https://intel.threadlinqs.com/mcp