VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Mar 11, 2026· Updated Aug 11, 2026

CVE-2026-23813

CVE-2026-23813

Description

A vulnerability has been identified in the web-based management interface of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. In some cases this could enable resetting the admin password.

Affected products

3
  • HPE/Arubaos Cx
    cpe:2.3:o:hpe:arubaos-cx:*:*:*:*:*:*:*:*
    Range: <=10.10.1170
  • Arubanetworks/AOS-CXllm-create
  • Hewlett Packard Enterprise (HPE)/AOS-CXv5
    Range: 10.17.0000

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.