CVE-2026-23814: A vulnerability in the command parameters of a certain AOS-CX CLI command could allow a low-privilege authenticated remote attacker to inject malicious…

PriorityP358high8.8CVSS 3.1

AVNACLPRLUINSUCHIHAH

EPSS

0.56%

45.5th percentile

A vulnerability in the command parameters of a certain AOS-CX CLI command could allow a low-privilege authenticated remote attacker to inject malicious commands resulting in unwanted behavior.

Affected

8 ranges

Vendor	Product	Version range	Fixed in
hewlett_packard_enterprise	aos-cx	10.10.0000 – 10.10.1170	—
hewlett_packard_enterprise	aos-cx	10.13.0000 – 10.13.1101	—
hewlett_packard_enterprise	aos-cx	10.16.0000 – 10.16.1020	—
hewlett_packard_enterprise	aos-cx	10.17.0000 – 10.17.0001	—
hpe	arubaos-cx	<= 10.10.1170	—
hpe	arubaos-cx	10.13.0000 – 10.13.1160	—
hpe	arubaos-cx	10.16.0000 – 10.16.1020	—
hpe	arubaos-cx	10.17.0000 – 10.17.0001	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.