CVE-2026-23817

CVSS 3.1: 6.1 medium
EPSS: <1%p21
Published: Mar 11, 2026 · Mar 11, 2026
Modified: Jun 17, 2026

Analyze CVE-2026-23817 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

A vulnerability in the web-based management interface of AOS-CX Switches could allow an unauthenticated remote attacker to redirect users to an arbitrary URL.

Vendors: hpe

Products: arubaos-cx

Weakness: CWE-601

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news

1 story

Hewlett Packard Enterprise fixes critical authentication bypass in Aruba AOS

Security AffairsMar 11, 11:28 UTC · Mar 11, 2026VulnerabilityCVE-2026-23813 CVE-2026-23814 CVE-2026-23815+32 · 1 read