NetSight
critical9.8

CVE-2026-23813

A vulnerability has been identified in the web-based management interface of AOS-CX switches that could potentially allow an unauthenticated remote actor to ci…

Impact

A vulnerability has been identified in the web-based management interface of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. In some cases this could enable resetting the admin password.

Affected products

VendorProductAffected versions
HpeArubaos-Cx
before 10.10.1180
from 10.13.0000 before 10.13.1161
from 10.16.0000 before 10.16.1030
from 10.17.0000 before 10.17.1001

Weakness classification

References