Description
Vulnerabilities have been identified in the operating system of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. In some cases this could enable unauthorized modification of affected resources and limited disruption of affected services.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Hewlett Packard Enterprise (HPE) | AOS-CX | 10.18.0000 – ≤ 10.18.0001, 10.17.0000 – ≤ 10.17.1021, 10.16.0000 – ≤ 10.16.1051, 10.13.0000 – ≤ 10.13.1180, 10.10.0000 – ≤ 10.10.1180 | — |
Advisories 2
- NCSC-2026-0340 Kwetsbaarheden verholpen in Aruba Networks ArubaOS-CX NCSC-NL (Netherlands) · Sep 3, 2026
- WID-SEC-2026-3140 Aruba ArubaOS-CX: Mehrere Schwachstellen BSI CERT-Bund (WID) · Sep 1, 2026