Vulnerabilitycritical

Hewlett Packard Enterprise fixes critical authentication bypass in Aruba AOS

Security Affairsby @securityaffairsMar 11, 2026 · 11:28 UTC (Mar 11, 2026)3 min read2 · 1 read

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2026-23813 CVE-2026-23814 CVE-2026-23815 CVE-2026-23816 CVE-2026-23817 CVE-2025-37103

Tags: cve-2026-23813 cve-2026-23814 cve-2026-23815 cve-2026-23816 cve-2026-23817 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2025-37103	Hard-coded login credentials were found in HPE Networking Instant On Access Points, allowing anyone with knowledge of it to bypass normal device authentication	9.8	1%		Jul 8, 2025
CVE-2026-23813 +4 related CVEs CVE-2026-23816 CVE-2026-23814 CVE-2026-23815 CVE-2026-23817	A vulnerability has been identified in the web-based management interface of AOS-CX switches that could potentially allow an unauthenticated remote actor to…	9.8 group max	<1%		Mar 11, 2026

From the original article

3 min read at securityaffairs.com

Hewlett Packard Enterprise (HPE) fixed several flaws in Aruba AOS-CX, including a critical bug that lets attackers reset admin passwords. Hewlett Packard Enterprise (HPE) patched multiple vulnerabilities in Aruba AOS-CX, the operating system used in Aruba CX switches. The most severe issue, tracked as CVE-2026-23813 (CVSS score of 9.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.