HPE iLO 6 Remote DoS Vulnerability Security Bulletin (CVE-2026-63457)

HPESBF05090 rev.1 - HPE Integrated Lights-Out 6 (ILO 6) Denial of Service Vulnerability Vulnerability Overview Potential Security Impact: Remote: Denial of Service (DoS) Source: Hewlett Packard Enterprise, HPE Product Security Response Team Reference: CVE-2026-63457 Scope Affected Software Versions: Only affected versions are listed. - HPE Integrated Lights-Out 6 (ILO 6) - prior to v1.78 Remediation HPE has released the following software updates to resolve the vulnerability in HPE Integrated Lights-Out 6 (ILO 6): - HPE Integrated Lights-Out 6 (ILO 6) version 1.78 or later Steps to Download Product Firmware 1. Click the following link: HPE Customer Support Center 2. Select a product name from the list of affected products, and wait in the text search field for the "Recommended Products" list to appear. From the displayed "Recommended Products" list, identify the required product and select it. 3. The page will refresh to include the selection of the "Drivers & Software" tab. 4. Select the "Drivers & Software" tab to find the components you need and download them. Note To ensure you select the latest version of the firmware/driver, click the "Revisions" tab to check if a newer version is available. History Version 1 (rev.1) - Initial Release on May 26, 2026 Third-Party Security Patches Third-party security patches should be installed on systems running Hewlett Packard Enterprise (HPE) software products to comply with the customer's patch management policy. Support For questions regarding the implementation of recommendations in this security bulletin, contact normal HPE service support channels. For other questions regarding the content of this security bulletin, please send an email to security-alert@hpe.com. Reporting Report potential security vulnerabilities for any HPE supported product: - Web Form: https://www.hpe.com/info/report-security-vulnerability - Email: security-alert@hpe.com Subscription Subscribe via email to receive future HPE security bulletins: http://www.hpe.com/support/Subscriber_Choice Security Bulletin Archive List of recently released security bulletins: http://www.hpe.com/support/Security_Bulletin_Archive Disclaimer The Hewlett Packard Enterprise Development LP assumes no responsibility for technical or editorial errors or omissions. The information provided is supplied "as is" without warranty of any kind.

Goal Reached Thanks to every supporter — we hit 100%!

HPE iLO 6 Remote DoS Vulnerability Security Bulletin (CVE-2026-63457)