Several vulnerabilities (CVE-2024-4741, CVE-2026-23592, CVE-2026-23593) have been discovered in Aruba products. A remote attacker could exploit some of these vulnerabilities to trigger denial of service condition, sensitive information disclosure, data manipulation and remote code execution on the targeted system. The vulnerabilities affect all versions of HPE Aruba Networking Fabric Composer released up to version 7.3.0.

More information on vulnerabilities and updates is available in Aruba security bulletins – arubanetworks.com