VYPR
← All advisories
High severity7.2NVD Advisory· Published Mar 11, 2026· Updated Aug 11, 2026

CVE-2026-23815

CVE-2026-23815

Description

A vulnerability in a custom binary used in AOS-CX Switches' CLI could allow an authenticated remote attacker with high privileges to perform command injection. Successful exploitation could allow an attacker to execute unauthorized commands.

Affected products

3
  • HPE/Arubaos Cx
    cpe:2.3:o:hpe:arubaos-cx:*:*:*:*:*:*:*:*
    Range: <=10.10.1170
  • HPE/AOS-CX Switchesllm-fuzzy
  • Hewlett Packard Enterprise (HPE)/AOS-CXv5
    Range: 10.17.0000

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.

CVE-2026-23815 · High · VYPR