PT-2026-24411 · Aruba · Aruba Aos-Cx

Published

2026-03-10

·

Updated

2026-03-15

·

CVE-2026-23813

CVSS v3.1
9.8
VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Aruba AOS-CX (affected versions not specified)
Description A critical authentication bypass flaw exists in Aruba AOS-CX switches. This flaw allows an unauthenticated remote attacker to reset administrator passwords through the web management interface. Exploitation of this issue could lead to privileged network compromise if management interfaces are exposed or poorly segmented.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2026-23813

Affected Products

Aruba Aos-Cx