← Database

CVE-2026-23813

CRITICAL CVSS: 9.8 Published: 2026-03-11 Modified: 2026-08-11

Description

A vulnerability has been identified in the web-based management interface of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. In some cases this could enable resetting the admin password.

Affected Platforms

Hpe Aruba Cx 6100 12G \(Jl679A\)Hpe Aruba Cx 6300M 48P \(S0G06A\)Hpe Aruba Cx 6000 12P \(R8N89B\)Hpe Aruba Cx 8320 32 \(Jl579A\)Hpe Aruba Cx 6300M 48 \(Jl663A\)Hpe Aruba Cx 6200M 24G \(R8V09A\)Hpe Aruba Cx 8360-12C \(Jl708C\)Hpe Aruba Cx 6200M 36G \(R8Q71A\)Hpe Aruba Cx 6000 48P \(S4R24A\)Hpe Aruba Cx 6200F 48G \(S0M90A\)

Weakness Type

CWE-287

References