HPE AV26-727 patches critical flaws in Aruba Private 5G Core (1.26.1.1 and prior) and EdgeConnect SD-WAN gateways. This is carrier/enterprise network infrastructure — patch now if you run it; most smaller shops don't operate 5G cores or SD-WAN gateways at all.Cyber Resilience desk
What this means for you — CISO:Critical fixes for Aruba Private 5G Core (≤1.26.1.1) and EdgeConnect SD-WAN Gateways — patch both on your standard cycle; check advisory for exploit maturity before deprioritizing.
What this means for you — Lean IT orgs:This is carrier-grade 5G and SD-WAN gear for large networks — if you don't run Aruba SD-WAN or private 5G, there's nothing to do here.
What this means for you — MSP:Flag any client running Aruba EdgeConnect SD-WAN or Private 5G Core across your managed estates and schedule the critical patch first.
What this means for you — Researcher:Advisory covers two distinct product lines (5G core, SD-WAN gateway) under one bulletin — worth checking whether the underlying flaws share a root cause or are unrelated bundled fixes.