HPE patches eight max severity RCE and auth bypass AOS flaws
2026-10-23T13:23:22Z•d3e7b2022f435ea3ebc99526f0544e54ab5f9134ef092cb12e6e8fe1c0f144ce
ArubaOSClickFixGitLabLazarusPHP2ShellPlex-Media-ServerPyPIVeloCloud-Orchestratoractive-exploitationauthentication-bypassbusiness-email-compromisecredential-theftcybercrimedata-breachinfo-stealerransomwareremote-code-executionsupply-chain-compromisevulnerabilityzero-day
What happened
A BleepingComputer security-news digest covering critical vulnerabilities, active exploitation, supply-chain compromises, data breaches, malware delivery, and cybercrime activity. Key items include actively exploited VeloCloud Orchestrator and Plex vulnerabilities, maximum-severity ArubaOS and GitLab flaws, PHP2Shell exploitation before patch availability, a compromised LiteLLM release pipeline distributing an info-stealer, and major customer or infrastructure breaches.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- bleepingcomputer
- Record identifier
- d3e7b2022f435ea3ebc99526f0544e54ab5f9134ef092cb12e6e8fe1c0f144ce
- Enrichment time
- 2026-10-23T13:23:22Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.