WID-SEC-W-2026-0686

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Aruba AOS-CX: Mehrere Schwachstellen

view advisory published 2026-03-10

Ein Angreifer kann mehrere Schwachstellen in Aruba AOS-CX ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um beliebigen Programmcode auszuführen, und um Daten zu manipulieren.

01

describes (5)

Related CVEs.

IDseverity exploitable
CVE-2026-23817USmedium6.1—
A vulnerability in the web-based management interface of AOS-CX Switches could allow an unauthenticated remote attacker to redirect users to an arbitrary URL.
CVE-2026-23816UShigh8.8—
A vulnerability in the command line interface of AOS-CX Switches could allow an authenticated remote attacker to execute arbitrary commands on the underlying operating system.
CVE-2026-23815US——
A vulnerability in a custom binary used in AOS-CX Switches' CLI could allow an authenticated remote attacker with high privileges to perform command injection. Successful exploitat…
CVE-2026-23814UShigh8.8—
A vulnerability in the command parameters of a certain AOS-CX CLI command could allow a low-privilege authenticated remote attacker to inject malicious commands resulting in unwant…
CVE-2026-23813UScritical9.8Exploit
A vulnerability has been identified in the web-based management interface of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumvent existing aut…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan