CVE-2026-23815
published 2026-03-11CVE-2026-23815: A vulnerability in a custom binary used in AOS-CX Switches' CLI could allow an authenticated remote attacker with high privileges to perform command injection…
PriorityP350high7.2CVSS 3.1
AVNACLPRHUINSUCHIHAH
EPSS
0.94%
56.4th percentile
A vulnerability in a custom binary used in AOS-CX Switches' CLI could allow an authenticated remote attacker with high privileges to perform command injection. Successful exploitation could allow an attacker to execute unauthorized commands.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| hewlett_packard_enterprise | aos-cx | 10.10.0000 – 10.10.1170 | — |
| hewlett_packard_enterprise | aos-cx | 10.13.0000 – 10.13.1101 | — |
| hewlett_packard_enterprise | aos-cx | 10.16.0000 – 10.16.1020 | — |
| hewlett_packard_enterprise | aos-cx | 10.17.0000 – 10.17.0001 | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-03-11
Published