Skip to content
OpenAdvisories
High · 7.2 CVE-2026-23816 EUVD-2026-11077GHSA-4jg3-r8r3-wpr3

Authenticated Command Injection found in admin AOS-CX CLI command

Published Mar 11, 2026 · Updated Mar 11, 2026 · Assigned by hpe

Description

A vulnerability in the command line interface of AOS-CX Switches could allow an authenticated remote attacker to execute arbitrary commands on the underlying operating system.

Affected products

VendorProductAffectedFixed
Hewlett Packard Enterprise (HPE) AOS-CX 10.17.0000 – ≤ 10.17.0001, 10.16.0000 – ≤ 10.16.1020, 10.13.0000 – ≤ 10.13.1101, 10.10.0000 – ≤ 10.10.1170 —

Advisories 1

References