PHP Vulnerability Responses by Company

Hewlett Packard Enterprise

Global cloud / infrastructure
Aliases / services
Hewlett Packard Enterprise / HPE / Hewlett Packard Enterprise Company / HPE Aruba Networking / ClearPass Policy Manager / hpe.com
Official website
https://www.hpe.com

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Listed services and systems

Response status
Dedicated ClearPass hotfix available
Response information checked
2026-10-27 Rechecked: 2026-10-27

Enterprise IT and networking products.

ClearPass Policy Manager 6.14.1 and earlier, and 6.11.16 and earlier, are affected. Dedicated PHP hotfixes for 6.14.1/6.11.16 provide the fix; the base releases alone are insufficient.

What users should do

Move to a supported target version and apply its PHP hotfix from the HPE Networking Support Portal. Restrict management access until installation.

Official service URL

Source URLs

  1. PHP2Shell response and scopehttps://csaf.arubanetworking.hpe.com/2026/hpe_networking_-_hpesbnw05171.txtResponse evidence
  2. Operating entityhttps://www.hpe.com/int/en/legal/privacy.htmlService and operation documentation
Related official sources
  1. PHP2Shell response and scopeOfficial notice
  2. Operating entityOfficial information directory

Comments