Read the docs
TI-2026-19179 Aliases CVE-2026-23813GHSA-37q7-686v-7f32

Authentication Bypass in Web Interface allows Unauthenticated Admin Password Reset

Priority MEDIUM 50CWE-287Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-287.

Summary

A vulnerability has been identified in the web-based management interface of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. In some cases this could enable resetting the admin password.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00793 56th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
Hewlett Packard Enterprise (HPE)AOS-CX10.17.0000 – 10.17.0001; 10.16.0000 – 10.16.1020; 10.13.0000 – 10.13.1160; 10.10.0000 – 10.10.1170—No fix listedCNA
  • AOS-CX VendorHewlett Packard Enterprise (HPE) Affected 10.17.0000 – 10.17.0001; 10.16.0000 – 10.16.1020; 10.13.0000 – 10.13.1160; 10.10.0000 – 10.10.1170 Fixed in — No fix listed CNA

CPE configurations NVD · 156

CPEVersionsRoleVendor
cpe:2.3:o:hpe:arubaos-cx:*:*:*:*:*:*:*:*before 10.10.1180; 10.13.0000 to before 10.13.1161; 10.16.0000 to before 10.16.1030; 10.17.0000 to before 10.17.1001VulnerableHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_10000-48y6c_\(r8p13a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_10000-48y6c_\(r8p14a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_10000-48y6c_\(s0f98a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_10040_\(s4r58a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_10040_32p_\(s4r54a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_10040_32p_\(s4r55a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_10040_32p_\(s4r56a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_4100i_12-port_\(jl817a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_4100i_24-port_\(jl818a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
Show 146 more CPE
CPEVersionsRoleVendor
cpe:2.3:h:hpe:aruba_cx_6000_12g_\(r8n89a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6000_12p_\(r8n89b\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6000_12p_\(s4r21a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6000_24g_\(r8n87a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6000_24g_\(r8n88a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6000_24p_\(r8n87b\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6000_24p_\(r8n88b\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6000_24p_\(s4r26a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6000_24p_\(s4r27a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6000_48g_\(r8n85a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6000_48g_\(r8n86a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6000_48g_\(r9y03a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6000_48p_\(r8n85b\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6000_48p_\(r8n86b\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6000_48p_\(r9y03b\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6000_48p_\(s4r20a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6000_48p_\(s4r24a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6000_48p_\(s4r25a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6000_8p_\(s4r22a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6000_8p_\(s4r23a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6000_8p_\(s4r28a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6000_8p_\(s4r29a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6100_12g_\(jl679a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6100_24g_\(jl677a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6100_24g_\(jl678a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6100_48g_\(jl675a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6100_48g_\(jl676a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6100_48g_\(r9y04a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6200f_12g_\(r8q72a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6200f_12g_\(r8v13a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6200f_24g_\(jl724b\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6200f_24g_\(jl725b\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6200f_24g_\(s0g13a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6200f_24g_\(s0g14a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6200f_24g_\(s0m81a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6200f_24g_\(s0m82a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6200f_24g_\(s0m86a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6200f_24g_\(s0m87a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6200f_48g_\(jl726b\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6200f_48g_\(jl727b\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6200f_48g_\(jl728b\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6200f_48g_\(s0g15a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6200f_48g_\(s0g16a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6200f_48g_\(s0g17a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6200f_48g_\(s0m83a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6200f_48g_\(s0m84a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6200f_48g_\(s0m85a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6200f_48g_\(s0m88a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6200f_48g_\(s0m89a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6200f_48g_\(s0m90a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6200m_24g_\(r8q67a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6200m_24g_\(r8q68a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6200m_24g_\(r8v08a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6200m_24g_\(r8v09a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6200m_36g_\(r8q71a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6200m_36g_\(r8v12a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6200m_48g_\(r8q69a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6200m_48g_\(r8q70a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6200m_48g_\(r8v10a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6200m_48g_\(r8v11a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300f_24_\(jl666a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300f_24_\(jl668a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300f_24p_\(s0g96a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300f_24p_\(s0g98a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300f_48_\(jl665a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300f_48_\(jl667a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300f_48p_\(s0g95a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300f_48p_\(s0g97a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300m_16p_\(s4p41a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300m_16p_\(s4p45a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300m_24_\(jl658a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300m_24_\(jl660a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300m_24_\(jl662a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300m_24_\(jl664a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300m_24p_\(r8s89a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300m_24p_\(r8s92a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300m_24p_\(s0f99a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300m_24p_\(s0g01a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300m_24p_\(s0g03a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300m_24p_\(s0g05a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300m_24p_\(s4p44a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300m_24p_\(s4p48a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300m_24p_\(s5z46a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300m_32p_\(s4p42a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300m_32p_\(s4p46a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300m_48_\(jl659a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300m_48_\(jl661a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300m_48_\(jl663a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300m_48_\(jl762a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300m_48p_\(r8s90a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300m_48p_\(s0g00a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300m_48p_\(s0g02a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300m_48p_\(s0g04a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300m_48p_\(s0g06a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300m_48p_\(s0x44a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300m_48p_\(s4p43a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300m_48p_\(s4p47a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300m_48sr5_\(r8s91a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6405_\(r0x26a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6405_48sfp\+8sfp56_\(r0x30a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6405_96g_\(r0x29a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6405_v2_\(r0x26c\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6410_\(r0x27a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6410_96g_\(jl741a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6410_v2_\(r0x27c\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_8320_32_\(jl579a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_8320_48_\(jl479a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_8320_48_\(jl581a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_8325-32c_\(jl626a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_8325-32c_\(jl627a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_8325-48y8c_\(jl624a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_8325-48y8c_\(jl625a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_8325-48y8c_\(jl858a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_8325h-16c_\(s4b22a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_8325h-16c_\(s4b24a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_8325h-18y4c_\(s4b21a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_8325h-18y4c_\(s4b23a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_8325p-32c_\(s0g07a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_8325p-32c_\(s0g08a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_8360-12c_\(jl708c\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_8360-12c_\(jl709c\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_8360-16y2c_\(jl702c\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_8360-16y2c_\(jl703c\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_8360-24xf2c_\(jl710c\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_8360-24xf2c_\(jl711c\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_8360-32y4c_\(jl700c\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_8360-32y4c_\(jl701c\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_8360-48xt4c_\(jl706c\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_8360-48xt4c_\(jl707c\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_8360-48y6c_\(jl704c\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_8360-48y6c_\(jl705c\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_8400_\(jl376a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_8400_8-slot_chassis_\(jl375a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_9300_\(r8z97a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_9300_\(r8z98a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_9300_\(r8z99a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_9300_\(r9a00a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_9300_32d_\(r8z96a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_9300_32d_\(r9a29a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_9300_32d_\(r9a30a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_9300s_32p_\(s0f81a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_9300s_32p_\(s0f82a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_9300s_32p_\(s0f83a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_9300s_32p_\(s0f84a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_9300s_32p_\(s0f87a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_9300s_32p_\(s0f88a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-23813
  2. 2026-10-03 Alias added: GHSA-37q7-686v-7f32

References

  • TI-2002-02356 The Diffie-Hellman Key Agreement Protocol allows remote attackers (from the client side)… CVSS 3.1HIGH 7.5
  • TI-2026-51814 Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-CX CVSS 3.1CRITICAL 9.8
  • TI-2026-51843 Credential Manager Vulnerability Allows Unauthorized Administrative Access CVSS 3.1CRITICAL 9.8
  • TI-2026-19182 Authenticated Command Injection found in admin AOS-CX CLI command CVSS 3.1HIGH 8.8
  • TI-2023-03473 Authenticated Command Injection Vulnerability in AOS-CX Command Line Interface CVSS 3.1HIGH 8.8
  • TI-2021-17871 Command injection in Aruba CX 6200F Switch Series, Aruba 6300 Switch Series, Aruba 6400… CVSS 3.1HIGH 8.8
See all 56 →

Sources