HPE this week warned of two critical vulnerabilities in Aruba Networking access points that could lead to unauthenticated command injection.