Read the docs
TI-2026-19181 Aliases CVE-2026-23815GHSA-3h67-94ff-4pcq

Authenticated Command Injection found in AOS-CX Administrative CLI Command

Priority LOW 36CWE-77Published · Updated

Key facts

Attack vector
Network
Privileges required
High
User interaction
None
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-77.

Summary

A vulnerability in a custom binary used in AOS-CX Switches' CLI could allow an authenticated remote attacker with high privileges to perform command injection. Successful exploitation could allow an attacker to execute unauthorized commands.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.01033 63rd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
Hewlett Packard Enterprise (HPE)AOS-CX10.17.0000 – 10.17.0001; 10.16.0000 – 10.16.1020; 10.13.0000 – 10.13.1101; 10.10.0000 – 10.10.1170—No fix listedCNA
  • AOS-CX VendorHewlett Packard Enterprise (HPE) Affected 10.17.0000 – 10.17.0001; 10.16.0000 – 10.16.1020; 10.13.0000 – 10.13.1101; 10.10.0000 – 10.10.1170 Fixed in — No fix listed CNA

CPE configurations NVD · 156

CPEVersionsRoleVendor
cpe:2.3:o:hpe:arubaos-cx:*:*:*:*:*:*:*:*before 10.10.1180; 10.13.0000 to before 10.13.1161; 10.16.0000 to before 10.16.1030; 10.17.0000 to before 10.17.1001VulnerableHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_10000-48y6c_\(r8p13a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_10000-48y6c_\(r8p14a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_10000-48y6c_\(s0f98a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_10040_\(s4r58a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_10040_32p_\(s4r54a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_10040_32p_\(s4r55a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_10040_32p_\(s4r56a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_4100i_12-port_\(jl817a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_4100i_24-port_\(jl818a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
Show 146 more CPE
CPEVersionsRoleVendor
cpe:2.3:h:hpe:aruba_cx_6000_12g_\(r8n89a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6000_12p_\(r8n89b\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6000_12p_\(s4r21a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6000_24g_\(r8n87a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6000_24g_\(r8n88a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6000_24p_\(r8n87b\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6000_24p_\(r8n88b\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6000_24p_\(s4r26a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6000_24p_\(s4r27a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6000_48g_\(r8n85a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6000_48g_\(r8n86a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6000_48g_\(r9y03a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6000_48p_\(r8n85b\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6000_48p_\(r8n86b\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6000_48p_\(r9y03b\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6000_48p_\(s4r20a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6000_48p_\(s4r24a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6000_48p_\(s4r25a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6000_8p_\(s4r22a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6000_8p_\(s4r23a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6000_8p_\(s4r28a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6000_8p_\(s4r29a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6100_12g_\(jl679a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6100_24g_\(jl677a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6100_24g_\(jl678a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6100_48g_\(jl675a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6100_48g_\(jl676a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6100_48g_\(r9y04a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6200f_12g_\(r8q72a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6200f_12g_\(r8v13a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6200f_24g_\(jl724b\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6200f_24g_\(jl725b\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6200f_24g_\(s0g13a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6200f_24g_\(s0g14a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6200f_24g_\(s0m81a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6200f_24g_\(s0m82a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6200f_24g_\(s0m86a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6200f_24g_\(s0m87a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6200f_48g_\(jl726b\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6200f_48g_\(jl727b\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6200f_48g_\(jl728b\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6200f_48g_\(s0g15a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6200f_48g_\(s0g16a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6200f_48g_\(s0g17a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6200f_48g_\(s0m83a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6200f_48g_\(s0m84a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6200f_48g_\(s0m85a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6200f_48g_\(s0m88a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6200f_48g_\(s0m89a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6200f_48g_\(s0m90a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6200m_24g_\(r8q67a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6200m_24g_\(r8q68a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6200m_24g_\(r8v08a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6200m_24g_\(r8v09a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6200m_36g_\(r8q71a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6200m_36g_\(r8v12a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6200m_48g_\(r8q69a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6200m_48g_\(r8q70a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6200m_48g_\(r8v10a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6200m_48g_\(r8v11a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300f_24_\(jl666a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300f_24_\(jl668a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300f_24p_\(s0g96a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300f_24p_\(s0g98a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300f_48_\(jl665a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300f_48_\(jl667a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300f_48p_\(s0g95a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300f_48p_\(s0g97a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300m_16p_\(s4p41a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300m_16p_\(s4p45a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300m_24_\(jl658a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300m_24_\(jl660a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300m_24_\(jl662a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300m_24_\(jl664a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300m_24p_\(r8s89a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300m_24p_\(r8s92a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300m_24p_\(s0f99a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300m_24p_\(s0g01a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300m_24p_\(s0g03a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300m_24p_\(s0g05a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300m_24p_\(s4p44a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300m_24p_\(s4p48a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300m_24p_\(s5z46a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300m_32p_\(s4p42a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300m_32p_\(s4p46a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300m_48_\(jl659a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300m_48_\(jl661a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300m_48_\(jl663a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300m_48_\(jl762a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300m_48p_\(r8s90a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300m_48p_\(s0g00a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300m_48p_\(s0g02a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300m_48p_\(s0g04a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300m_48p_\(s0g06a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300m_48p_\(s0x44a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300m_48p_\(s4p43a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300m_48p_\(s4p47a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300m_48sr5_\(r8s91a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6405_\(r0x26a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6405_48sfp\+8sfp56_\(r0x30a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6405_96g_\(r0x29a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6405_v2_\(r0x26c\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6410_\(r0x27a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6410_96g_\(jl741a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6410_v2_\(r0x27c\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_8320_32_\(jl579a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_8320_48_\(jl479a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_8320_48_\(jl581a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_8325-32c_\(jl626a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_8325-32c_\(jl627a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_8325-48y8c_\(jl624a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_8325-48y8c_\(jl625a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_8325-48y8c_\(jl858a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_8325h-16c_\(s4b22a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_8325h-16c_\(s4b24a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_8325h-18y4c_\(s4b21a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_8325h-18y4c_\(s4b23a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_8325p-32c_\(s0g07a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_8325p-32c_\(s0g08a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_8360-12c_\(jl708c\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_8360-12c_\(jl709c\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_8360-16y2c_\(jl702c\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_8360-16y2c_\(jl703c\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_8360-24xf2c_\(jl710c\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_8360-24xf2c_\(jl711c\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_8360-32y4c_\(jl700c\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_8360-32y4c_\(jl701c\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_8360-48xt4c_\(jl706c\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_8360-48xt4c_\(jl707c\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_8360-48y6c_\(jl704c\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_8360-48y6c_\(jl705c\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_8400_\(jl376a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_8400_8-slot_chassis_\(jl375a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_9300_\(r8z97a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_9300_\(r8z98a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_9300_\(r8z99a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_9300_\(r9a00a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_9300_32d_\(r8z96a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_9300_32d_\(r9a29a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_9300_32d_\(r9a30a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_9300s_32p_\(s0f81a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_9300s_32p_\(s0f82a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_9300s_32p_\(s0f83a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_9300s_32p_\(s0f84a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_9300s_32p_\(s0f87a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_9300s_32p_\(s0f88a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-23815
  2. 2026-10-03 Alias added: GHSA-3h67-94ff-4pcq

References

  • TI-2002-02356 The Diffie-Hellman Key Agreement Protocol allows remote attackers (from the client side)… CVSS 3.1HIGH 7.5
  • TI-2026-51814 Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-CX CVSS 3.1CRITICAL 9.8
  • TI-2026-19179 Authentication Bypass in Web Interface allows Unauthenticated Admin Password Reset CVSS 3.1CRITICAL 9.8
  • TI-2026-51843 Credential Manager Vulnerability Allows Unauthorized Administrative Access CVSS 3.1CRITICAL 9.8
  • TI-2026-19182 Authenticated Command Injection found in admin AOS-CX CLI command CVSS 3.1HIGH 8.8
  • TI-2023-03473 Authenticated Command Injection Vulnerability in AOS-CX Command Line Interface CVSS 3.1HIGH 8.8
See all 56 →

Sources