Hewlett Packard Enterprise (HPE) OneView Code Injection Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 07/01/2026. Patch affected systems as an emergency.
| Package | Affected versions | Patched versions |
|---|---|---|
| oneview | ≤ 10.20.00 |
A remote code execution issue exists in HPE OneView.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free