The most critical issues fall into two categories: authentication bypass vulnerabilities that could let attackers sidestep login controls, and RCE flaws that could enable arbitrary code execution on affected systems. Given the maximum severity rating, these should be treated as high-priority patching targets for anyone running ArubaOS in their environment.

Administrators running ArubaOS should review HPE's advisory and apply the available updates as soon as possible. As always, prioritize internet-facing and edge devices first, and check whether any of the addressed flaws impact hardware models or software branches currently deployed in your network.

Source: BleepingComputer

Are any of your ArubaOS devices exposed to these flaws, and have you scheduled the patch yet?