CVE-2026-23813Patch(hpe / aruba_cx_10000-48y6c_\(r8p13a\))

MEDIUMCVSS 9.8 · CRITICAL

Exploitation observed; activity peaked at 7 mentions and remains active

Immediate actions

Patch hpe aruba_cx_10000-48y6c_\(r8p13a\) systems immediately
Assume compromise if assets are exposed

Recommended action window: Immediate (within 24h)

NVD description

A vulnerability has been identified in the web-based management interface of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. In some cases this could enable resetting the admin password.

hpe CVEs Back to dashboard

4.8/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05027en_us&docLocale=en_US

Weakness type (CWE)

CWE-287

Priority

MEDIUM

Exploitation

ACTIVE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

aruba_cx_10000-48y6c_\(r8p13a\)
aruba_cx_10000-48y6c_\(r8p14a\)
aruba_cx_10000-48y6c_\(s0f98a\)
aruba_cx_10040_32p_\(s4r54a\)

Threat summary

Active exploitation appears in 1 classified signals
Patch or workaround signal is available
20 mentions across 8 observed days
Momentum state: stable

What's happening

Active exploitation reported across 1 signal
Patch or workaround mentioned in 10 signals
Technical details provided in 18 signals
Disclosure: 7 classified signals
General: 3 classified signals
Peaked 6d ago at 7 mentions (2026-03-11); latest day: 1
20 total mentions across 8 days

Affected systems

Vendors

hpe

Products

aruba_cx_10000-48y6c_\(r8p13a\)aruba_cx_10000-48y6c_\(r8p14a\)aruba_cx_10000-48y6c_\(s0f98a\)aruba_cx_10040_32p_\(s4r54a\)aruba_cx_10040_32p_\(s4r55a\)aruba_cx_10040_32p_\(s4r56a\)aruba_cx_10040_\(s4r58a\)aruba_cx_4100i_12-port_\(jl817a\)aruba_cx_4100i_24-port_\(jl818a\)aruba_cx_6000_12g_\(r8n89a\)

1 version affected across 156 products

Deep dive

Activity timeline20 mentions / 8d

Signal classification4 categories

Patch

945.0%

Disclosure

735.0%

General

315.0%

Active Exploitation

15.0%

Referenced assets14 URLs

By indicator

Classification over time

Date	Total	Labels

2026-03-10	2	Patch2
2026-03-11	7	Disclosure3General1Patch3
2026-03-12	1	Patch1
2026-03-13	2	Disclosure1General1
2026-03-14	2	Disclosure1Patch1
2026-03-15	4	Active Exploitation1Disclosure1Patch2
2026-03-17	1	Disclosure1
2026-03-30	1	General1

Full discourse20 posts

Techjunkie Aman@Techjunkie_Aman208d
Patch
A single bug in HPE Aruba switches can reset the admin password remotely. No login required. CVSS score: 9.8 Tracked as: CVE-2026-23813 The flaw affects the web management interface in Aruba AOS-CX. If exploited, attackers could: • reset administrator credentials • bypass authentication • take control of the switch • potentially disrupt entire network infrastructure Affected devices include: • CX 4100i • CX 6000 • CX 6100 • CX 6200 • CX 6300 • CX 6400 • CX 8320 • CX 8325 • CX 8360 • CX 9300 • CX 10000 HPE has released patches in: • 10.17.1001 • 10.16.1030 • 10.13.1161 • 10.10.1180 No active exploitation reported yet, but admins should update immediately. Source: securityweek
Post summary
An HPE Aruba switch vulnerability (CVE‑2026‑23813) allows remote reset of admin credentials; patches are available and should be applied.
1016310.3K
7.2K followersView on X
kokumօtօ@__kokumoto208d
Disclosure
HPE Aruba AOS-CXに重大(Critical)な認証回避の脆弱性。CVE-2026-23813はCVSSスコア9.8で、遠隔から無認証で管理者パスワードをリセット可能なもの。 https://www.rescana.com/post/cve-2026-23813-critical-authentication-bypass-in-hpe-aruba-aos-cx-allows-remote-admin-password-rese
Post summary
CVE-2026-23813 is a critical authentication bypass in HPE Aruba AOS-CX that permits unauthenticated remote resetting of admin passwords, with a CVSS score of 9.8.
00043960
7.3K followersView on X
CCB Alert@CCBalert212d
Patch
Warning: #HPE patched multiple vulnerabilities in it #Aruba Networking AOS-CX operating system. The most severe vulnerability (CVE-2026-23813, CVSSv3 9.8) can lead to an admin password reset. #Patch #Patch #Patch
Post summary
HPE released patches for several vulnerabilities in Aruba Networking AOS‑CX, including a high‑severity CVE‑2026‑23813 (CVSS 9.8) that could allow an attacker to reset an admin password.
03030395
7.2K followersView on X
Cybersecurity News Everyday@TweetThreatNews209d
Patch
HPE patches a critical unauthenticated remote flaw in Aruba AOS-CX switches (CVE-2026-23813) that allows admin password resets and bypasses authentication. Updates cover multiple CX series versions. #HPE #NetworkSecurity #USA https://ift.tt/kDzL3B7
Post summary
HPE has released patches for a critical unauthenticated remote flaw in Aruba AOS-CX switches (CVE-2026-23813) that permits admin password resets and authentication bypass, covering multiple CX series.
01101190
3.7K followersView on X
ThreatSynop@ThreatSynop209d
Disclosure
🚨 Critical HPE AOS-CX Flaw Lets Unauthenticated Attackers Reset Admin Passwords on Aruba Switches SecurityWeek reports that CVE-2026-23813 is a critical 9.8-rated flaw in Aruba Networking AOS-CX that can be exploited remotely without authentication to reset administrator passwords and bypass existing access controls on multiple switch series. This matters because takeover of core network switches can enable broader network disruption, traffic manipulation, and follow-on compromise across enterprise environments if exposed management interfaces are not patched or tightly restricted. 🎯 Target: Global/Enterprise Network Infrastructure #️⃣ Category: #Vulnerability #BlueTeam 🔗 URL: https://www.securityweek.com/critical-hpe-aos-cx-vulnerability-allows-admin-password-resets/
Post summary
SecurityWeek highlights CVE-2026-23813 as a critical flaw enabling unauthenticated attackers to reset passwords on Aruba switches, focusing on the vulnerability details and potential impact rather than PoC code, exploit tools, or active exploitation evidence.
1110072
286 followersView on X
The Hacker Wire@TheHackerWire212d
Disclosure
🔴 CVE-2026-23813 - Critical A vulnerability has been identified in the web-based management interface of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumvent existing authentica... https://www.thehackerwire.com/vulnerability/CVE-2026-23813/ https://t.co/VIiPTHSGR7
Post summary
A critical authentication bypass vulnerability (CVE-2026-23813) has been identified in the web‑based management interface of AOS‑CX switches; no PoC, exploit code, or patch details are included in the announcement.
0110056
134 followersView on X
IntegSec@integ_sec193d
General
CVE-2026-23813: Authentication Bypass Flaw - What It Means for Your Business and How to Respond https://hubs.li/Q048TqD50
Post summary
The text references a newly disclosed authentication bypass flaw (CVE-2026-23813) and promises business impact discussion and response guidance, but lacks concrete exploit details or remediation instructions.
0000033
29 followersView on X
CERT-PY@CERTpy206d
Disclosure
⚠️ Vulnerabilidades en productos HPE ❗ CVE-2026-23816 ❗ CVE-2026-23814 ❗ CVE-2026-23813 ➡️ Más info: https://www.cert.gov.py/vulnerabilidades-en-productos-hpe-3/ https://t.co/uUwfcN07TN
Post summary
The tweet announces three new HPE CVEs (2026‑23816, 2026‑23814, 2026‑23813) and provides links for additional information, indicating a disclosure notice without further technical or exploitation details.
00000106
6.6K followersView on X
nin_tech@nin_tech_x209d
Patch
HPE patches CVE-2026-23813 (CVSS 9.8) auth bypass in Aruba AOS-CX switches—enables remote admin password reset. Update to versions 10.17.1001, 10.16.1030, 10.13.1161, or 10.10.1180. Restrict management interface access. #cyberSecurity #infoSec #security
Post summary
HPE released a patch for CVE-2026-23813, an authentication bypass that allows remote admin password reset on Aruba AOS-CX switches, advising updates to specific firmware versions and interface restriction.
0000050
20 followersView on X
nin_tech@nin_tech_x209d
Active Exploitation
⚠️ HPE Aruba: Auth-Bypass (CVE-2026-23813, 9.8) – ohne Auth Admin-Pw reset! Sofort patchen! Chrome 146 Zero-Days: Angriffe laufen – update! MediaTek: 875 Mio Android-Geräte gefährdet – FW prüfen! #cyberSecurity #infoSec #security
Post summary
The post highlights active exploitation of Chrome 146 zero‑days, urges immediate updates for HPE Aruba auth‑bypass and MediaTek devices, and notes the severity of CVE-2026-23813 with a CVSS score of 9.8.
00000538
20 followersView on X
Matthew Kienow@HacksForProfit210d
General
HPE Aruba Networking AOS-CX authentication bypass (CVE-2026-23813) and more. https://www.runzero.com/blog/hpe-aruba-networking-cx/
Post summary
The snippet links to an article on HPE Aruba AOS‑CX authentication bypass (CVE‑2026‑23813) but provides no additional details beyond the CVE ID and type.
0000063
470 followersView on X
RagingCISO@CisoRaging77913211d
Disclosure
CVE-2026-23813: Aruba AOS-CX auth bypass CVSS 9.8. Unauthenticated attacker resets admin password, takes full control. Switches treated like furniture, yet they decide who talks to who. Exposed management plane = your segmentation is PowerPoint fiction.
Post summary
Disclosed Aruba AOS‑CX authentication bypass (CVE‑2026‑23813) with CVSS 9.8; unauthenticated attackers can reset admin passwords to gain full control.
0000046
6 followersView on X
RagingCISO@CisoRaging77913212d
Patch
CVE-2026-23813: CVSS 9.8 auth bypass on enterprise management interface. No auth needed, full admin access. Management interfaces don't belong on internet—principle old as BGP. Statistically, yours is exposed. Patch now. Then ask why it was reachable at all.
Post summary
CVE-2026-23813 is a high‑severity authentication bypass that grants full admin access to exposed enterprise management interfaces; a patch has been released to remediate the issue.
0000021
5 followersView on X
Cyber Daily News@CyberDaily_News212d
Patch
HPE patches CVE-2026-23813 (CVSS 9.8) in Aruba AOS-CX switches - unauthenticated attackers can reset admin passwords via the web management interface. Low complexity, no privileges needed. If your switch management plane is exposed, patch now or segment immediately. https://securityaffairs.com/189278/security/hewlett-packard-enterprise-fixes-critical-authentication-bypass-in-aruba-aos-cx.html #cybersecurity #HPE #Aruba #networking #patchnow
Post summary
HPE has released a patch for CVE‑2026‑23813 affecting Aruba AOS‑CX switches, where unauthenticated attackers could reset admin passwords; the vulnerability carries a CVSS score of 9.8 and users are advised to apply the patch or isolate the management interface.
0000045
12 followersView on X
Cyber News Live@cybernewslive213d
Patch
HPE has fixed a serious security flaw (CVE-2026-23813) in Aruba network switches used by many large companies. The flaw lets attackers reset the admin password without logging in first, giving them full control of the device. If your workplace uses Aruba CX-series switches, ask your IT team whether the update has been applied — these devices control who can access your company's network and data. 🔥 #CyberNewsLive https://bleepingcomputer.com/news/security/hpe-warns-of-critical-aos-cx-flaw-allowing-admin-password-resets/
Post summary
HPE has remedied CVE‑2026‑23813, a privilege escalation flaw that lets attackers reset admin passwords on Aruba switches; users should verify that the update has been applied.
0000075
1.6K followersView on X
CVE@CVEnew213d
General
CVE-2026-23813 A vulnerability has been identified in the web-based management interface of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumven… https://www.cve.org/CVERecord?id=CVE-2026-23813
Post summary
The text briefly references CVE‑2026‑23813 but does not provide any detailed technical information, PoC, exploitation evidence, or patch instructions.
00000101
56.7K followersView on X
CVEFind.com@CveFindCom213d
Disclosure
[CVE-2026-23813: CRITICAL] Vulnerability in AOS-CX switches' web management interface allows remote unauthorized access, bypassing authentication controls & resetting admin password.#cve,CVE-2026-23813,#cybersecurity https://cvefind.com/CVE-2026-23813
Post summary
The tweet announces a critical authentication bypass vulnerability (CVE‑2026‑23813) in AOS‑CX switches' web interface that enables remote unauthorized access and admin password reset.
0000049
601 followersView on X
0day Signal@0dayPublishing213d
Disclosure
🚨 CVE-2026-23813: Authe... HPE's AOS-CX auth bypass lets anyone reset admin passwords remotely - enterprise switches become open doors with CVSS 9.8 #AuthBypass #NetworkSec. https://zerodaysignal.com/vulnerability/CVE-2026-23813 #netsec #vulnerability #CVE #sysadmin #zeroday
Post summary
The post announces a new auth‑bypass vulnerability (CVE‑2026‑23813) in HPE AOS‑CX that allows remote administrators to reset passwords, with a CVSS score of 9.8, and links to a vulnerability resource.
0000039
142 followersView on X
RedLegg@RedLegg213d
Patch
Security Bulletin: Aruba AOS-CX (CVE-2026-23813, CVSS 9.8) allows authentication bypass in device management interfaces. Patch immediately. #ThreatIntel #RedLeggCTI https://hubs.li/Q046hqZ40
Post summary
The bulletin announces a high-severity authentication bypass flaw (CVE-2026-23813) in Aruba AOS-CX and urges users to apply a patch immediately, but provides no PoC or exploit details.
0000051
2.2K followersView on X
ThreatSynop@ThreatSynop213d
Patch
🚨 HPE Patches Critical Aruba AOS-CX Flaw That Could Let Attackers Reset Admin Passwords HPE fixed a critical authentication bypass flaw, CVE-2026-23813, in Aruba AOS-CX switches that could let an unauthenticated remote attacker reset administrator passwords through the web management interface. The issue matters because exposed or poorly segmented management interfaces on campus and data-center switches can become a direct path to privileged network compromise if left unpatched. 🎯 Target: Global/Enterprise Networking #️⃣ Category: #Vulnerability #BlueTeam 🔗 URL: https://www.bleepingcomputer.com/news/security/hpe-warns-of-critical-aos-cx-flaw-allowing-admin-password-resets/
Post summary
HPE has released a patch for a critical Aruba AOS‑CX authentication bypass (CVE‑2026‑23813) that could enable attackers to reset administrator passwords via the web interface; the notice stresses applying the fix promptly.
0000041
280 followersView on X

CPE platform detail156 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

156 of 156 entries

Part	Vendor	Product	Version	Target SW	Target HW
HW	hpe	aruba_cx_10000-48y6c_\(r8p13a\)	-	-	-
HW	hpe	aruba_cx_10000-48y6c_\(r8p14a\)	-	-	-
HW	hpe	aruba_cx_10000-48y6c_\(s0f98a\)	-	-	-
HW	hpe	aruba_cx_10040_32p_\(s4r54a\)	-	-	-
HW	hpe	aruba_cx_10040_32p_\(s4r55a\)	-	-	-
HW	hpe	aruba_cx_10040_32p_\(s4r56a\)	-	-	-
HW	hpe	aruba_cx_10040_\(s4r58a\)	-	-	-
HW	hpe	aruba_cx_4100i_12-port_\(jl817a\)	-	-	-
HW	hpe	aruba_cx_4100i_24-port_\(jl818a\)	-	-	-
HW	hpe	aruba_cx_6000_12g_\(r8n89a\)	-	-	-
HW	hpe	aruba_cx_6000_12p_\(r8n89b\)	-	-	-
HW	hpe	aruba_cx_6000_12p_\(s4r21a\)	-	-	-
HW	hpe	aruba_cx_6000_24g_\(r8n87a\)	-	-	-
HW	hpe	aruba_cx_6000_24g_\(r8n88a\)	-	-	-
HW	hpe	aruba_cx_6000_24p_\(r8n87b\)	-	-	-
HW	hpe	aruba_cx_6000_24p_\(r8n88b\)	-	-	-
HW	hpe	aruba_cx_6000_24p_\(s4r26a\)	-	-	-
HW	hpe	aruba_cx_6000_24p_\(s4r27a\)	-	-	-
HW	hpe	aruba_cx_6000_48g_\(r8n85a\)	-	-	-
HW	hpe	aruba_cx_6000_48g_\(r8n86a\)	-	-	-
HW	hpe	aruba_cx_6000_48g_\(r9y03a\)	-	-	-
HW	hpe	aruba_cx_6000_48p_\(r8n85b\)	-	-	-
HW	hpe	aruba_cx_6000_48p_\(r8n86b\)	-	-	-
HW	hpe	aruba_cx_6000_48p_\(r9y03b\)	-	-	-
HW	hpe	aruba_cx_6000_48p_\(s4r20a\)	-	-	-
HW	hpe	aruba_cx_6000_48p_\(s4r24a\)	-	-	-
HW	hpe	aruba_cx_6000_48p_\(s4r25a\)	-	-	-
HW	hpe	aruba_cx_6000_8p_\(s4r22a\)	-	-	-
HW	hpe	aruba_cx_6000_8p_\(s4r23a\)	-	-	-
HW	hpe	aruba_cx_6000_8p_\(s4r28a\)	-	-	-
HW	hpe	aruba_cx_6000_8p_\(s4r29a\)	-	-	-
HW	hpe	aruba_cx_6100_12g_\(jl679a\)	-	-	-
HW	hpe	aruba_cx_6100_24g_\(jl677a\)	-	-	-
HW	hpe	aruba_cx_6100_24g_\(jl678a\)	-	-	-
HW	hpe	aruba_cx_6100_48g_\(jl675a\)	-	-	-
HW	hpe	aruba_cx_6100_48g_\(jl676a\)	-	-	-
HW	hpe	aruba_cx_6100_48g_\(r9y04a\)	-	-	-
HW	hpe	aruba_cx_6200f_12g_\(r8q72a\)	-	-	-
HW	hpe	aruba_cx_6200f_12g_\(r8v13a\)	-	-	-
HW	hpe	aruba_cx_6200f_24g_\(jl724b\)	-	-	-
HW	hpe	aruba_cx_6200f_24g_\(jl725b\)	-	-	-
HW	hpe	aruba_cx_6200f_24g_\(s0g13a\)	-	-	-
HW	hpe	aruba_cx_6200f_24g_\(s0g14a\)	-	-	-
HW	hpe	aruba_cx_6200f_24g_\(s0m81a\)	-	-	-
HW	hpe	aruba_cx_6200f_24g_\(s0m82a\)	-	-	-
HW	hpe	aruba_cx_6200f_24g_\(s0m86a\)	-	-	-
HW	hpe	aruba_cx_6200f_24g_\(s0m87a\)	-	-	-
HW	hpe	aruba_cx_6200f_48g_\(jl726b\)	-	-	-
HW	hpe	aruba_cx_6200f_48g_\(jl727b\)	-	-	-
HW	hpe	aruba_cx_6200f_48g_\(jl728b\)	-	-	-
HW	hpe	aruba_cx_6200f_48g_\(s0g15a\)	-	-	-
HW	hpe	aruba_cx_6200f_48g_\(s0g16a\)	-	-	-
HW	hpe	aruba_cx_6200f_48g_\(s0g17a\)	-	-	-
HW	hpe	aruba_cx_6200f_48g_\(s0m83a\)	-	-	-
HW	hpe	aruba_cx_6200f_48g_\(s0m84a\)	-	-	-
HW	hpe	aruba_cx_6200f_48g_\(s0m85a\)	-	-	-
HW	hpe	aruba_cx_6200f_48g_\(s0m88a\)	-	-	-
HW	hpe	aruba_cx_6200f_48g_\(s0m89a\)	-	-	-
HW	hpe	aruba_cx_6200f_48g_\(s0m90a\)	-	-	-
HW	hpe	aruba_cx_6200m_24g_\(r8q67a\)	-	-	-
HW	hpe	aruba_cx_6200m_24g_\(r8q68a\)	-	-	-
HW	hpe	aruba_cx_6200m_24g_\(r8v08a\)	-	-	-
HW	hpe	aruba_cx_6200m_24g_\(r8v09a\)	-	-	-
HW	hpe	aruba_cx_6200m_36g_\(r8q71a\)	-	-	-
HW	hpe	aruba_cx_6200m_36g_\(r8v12a\)	-	-	-
HW	hpe	aruba_cx_6200m_48g_\(r8q69a\)	-	-	-
HW	hpe	aruba_cx_6200m_48g_\(r8q70a\)	-	-	-
HW	hpe	aruba_cx_6200m_48g_\(r8v10a\)	-	-	-
HW	hpe	aruba_cx_6200m_48g_\(r8v11a\)	-	-	-
HW	hpe	aruba_cx_6300f_24_\(jl666a\)	-	-	-
HW	hpe	aruba_cx_6300f_24_\(jl668a\)	-	-	-
HW	hpe	aruba_cx_6300f_24p_\(s0g96a\)	-	-	-
HW	hpe	aruba_cx_6300f_24p_\(s0g98a\)	-	-	-
HW	hpe	aruba_cx_6300f_48_\(jl665a\)	-	-	-
HW	hpe	aruba_cx_6300f_48_\(jl667a\)	-	-	-
HW	hpe	aruba_cx_6300f_48p_\(s0g95a\)	-	-	-
HW	hpe	aruba_cx_6300f_48p_\(s0g97a\)	-	-	-
HW	hpe	aruba_cx_6300m_16p_\(s4p41a\)	-	-	-
HW	hpe	aruba_cx_6300m_16p_\(s4p45a\)	-	-	-
HW	hpe	aruba_cx_6300m_24_\(jl658a\)	-	-	-
HW	hpe	aruba_cx_6300m_24_\(jl660a\)	-	-	-
HW	hpe	aruba_cx_6300m_24_\(jl662a\)	-	-	-
HW	hpe	aruba_cx_6300m_24_\(jl664a\)	-	-	-
HW	hpe	aruba_cx_6300m_24p_\(r8s89a\)	-	-	-
HW	hpe	aruba_cx_6300m_24p_\(r8s92a\)	-	-	-
HW	hpe	aruba_cx_6300m_24p_\(s0f99a\)	-	-	-
HW	hpe	aruba_cx_6300m_24p_\(s0g01a\)	-	-	-
HW	hpe	aruba_cx_6300m_24p_\(s0g03a\)	-	-	-
HW	hpe	aruba_cx_6300m_24p_\(s0g05a\)	-	-	-
HW	hpe	aruba_cx_6300m_24p_\(s4p44a\)	-	-	-
HW	hpe	aruba_cx_6300m_24p_\(s4p48a\)	-	-	-
HW	hpe	aruba_cx_6300m_24p_\(s5z46a\)	-	-	-
HW	hpe	aruba_cx_6300m_32p_\(s4p42a\)	-	-	-
HW	hpe	aruba_cx_6300m_32p_\(s4p46a\)	-	-	-
HW	hpe	aruba_cx_6300m_48_\(jl659a\)	-	-	-
HW	hpe	aruba_cx_6300m_48_\(jl661a\)	-	-	-
HW	hpe	aruba_cx_6300m_48_\(jl663a\)	-	-	-
HW	hpe	aruba_cx_6300m_48_\(jl762a\)	-	-	-
HW	hpe	aruba_cx_6300m_48p_\(r8s90a\)	-	-	-
HW	hpe	aruba_cx_6300m_48p_\(s0g00a\)	-	-	-
HW	hpe	aruba_cx_6300m_48p_\(s0g02a\)	-	-	-
HW	hpe	aruba_cx_6300m_48p_\(s0g04a\)	-	-	-
HW	hpe	aruba_cx_6300m_48p_\(s0g06a\)	-	-	-
HW	hpe	aruba_cx_6300m_48p_\(s0x44a\)	-	-	-
HW	hpe	aruba_cx_6300m_48p_\(s4p43a\)	-	-	-
HW	hpe	aruba_cx_6300m_48p_\(s4p47a\)	-	-	-
HW	hpe	aruba_cx_6300m_48sr5_\(r8s91a\)	-	-	-
HW	hpe	aruba_cx_6405_48sfp\+8sfp56_\(r0x30a\)	-	-	-
HW	hpe	aruba_cx_6405_96g_\(r0x29a\)	-	-	-
HW	hpe	aruba_cx_6405_\(r0x26a\)	-	-	-
HW	hpe	aruba_cx_6405_v2_\(r0x26c\)	-	-	-
HW	hpe	aruba_cx_6410_96g_\(jl741a\)	-	-	-
HW	hpe	aruba_cx_6410_\(r0x27a\)	-	-	-
HW	hpe	aruba_cx_6410_v2_\(r0x27c\)	-	-	-
HW	hpe	aruba_cx_8320_32_\(jl579a\)	-	-	-
HW	hpe	aruba_cx_8320_48_\(jl479a\)	-	-	-
HW	hpe	aruba_cx_8320_48_\(jl581a\)	-	-	-
HW	hpe	aruba_cx_8325-32c_\(jl626a\)	-	-	-
HW	hpe	aruba_cx_8325-32c_\(jl627a\)	-	-	-
HW	hpe	aruba_cx_8325-48y8c_\(jl624a\)	-	-	-
HW	hpe	aruba_cx_8325-48y8c_\(jl625a\)	-	-	-
HW	hpe	aruba_cx_8325-48y8c_\(jl858a\)	-	-	-
HW	hpe	aruba_cx_8325h-16c_\(s4b22a\)	-	-	-
HW	hpe	aruba_cx_8325h-16c_\(s4b24a\)	-	-	-
HW	hpe	aruba_cx_8325h-18y4c_\(s4b21a\)	-	-	-
HW	hpe	aruba_cx_8325h-18y4c_\(s4b23a\)	-	-	-
HW	hpe	aruba_cx_8325p-32c_\(s0g07a\)	-	-	-
HW	hpe	aruba_cx_8325p-32c_\(s0g08a\)	-	-	-
HW	hpe	aruba_cx_8360-12c_\(jl708c\)	-	-	-
HW	hpe	aruba_cx_8360-12c_\(jl709c\)	-	-	-
HW	hpe	aruba_cx_8360-16y2c_\(jl702c\)	-	-	-
HW	hpe	aruba_cx_8360-16y2c_\(jl703c\)	-	-	-
HW	hpe	aruba_cx_8360-24xf2c_\(jl710c\)	-	-	-
HW	hpe	aruba_cx_8360-24xf2c_\(jl711c\)	-	-	-
HW	hpe	aruba_cx_8360-32y4c_\(jl700c\)	-	-	-
HW	hpe	aruba_cx_8360-32y4c_\(jl701c\)	-	-	-
HW	hpe	aruba_cx_8360-48xt4c_\(jl706c\)	-	-	-
HW	hpe	aruba_cx_8360-48xt4c_\(jl707c\)	-	-	-
HW	hpe	aruba_cx_8360-48y6c_\(jl704c\)	-	-	-
HW	hpe	aruba_cx_8360-48y6c_\(jl705c\)	-	-	-
HW	hpe	aruba_cx_8400_8-slot_chassis_\(jl375a\)	-	-	-
HW	hpe	aruba_cx_8400_\(jl376a\)	-	-	-
HW	hpe	aruba_cx_9300_32d_\(r8z96a\)	-	-	-
HW	hpe	aruba_cx_9300_32d_\(r9a29a\)	-	-	-
HW	hpe	aruba_cx_9300_32d_\(r9a30a\)	-	-	-
HW	hpe	aruba_cx_9300_\(r8z97a\)	-	-	-
HW	hpe	aruba_cx_9300_\(r8z98a\)	-	-	-
HW	hpe	aruba_cx_9300_\(r8z99a\)	-	-	-
HW	hpe	aruba_cx_9300_\(r9a00a\)	-	-	-
HW	hpe	aruba_cx_9300s_32p_\(s0f81a\)	-	-	-
HW	hpe	aruba_cx_9300s_32p_\(s0f82a\)	-	-	-
HW	hpe	aruba_cx_9300s_32p_\(s0f83a\)	-	-	-
HW	hpe	aruba_cx_9300s_32p_\(s0f84a\)	-	-	-
HW	hpe	aruba_cx_9300s_32p_\(s0f87a\)	-	-	-
HW	hpe	aruba_cx_9300s_32p_\(s0f88a\)	-	-	-
OS	hpe	arubaos-cx	-	-	-

Explore more

Back to dashboard hpe CVEs aruba_cx_10000-48y6c_\(r8p13a\) vulnerabilities

What researchers are saying

CVE-2026-23813

Techjunkie Aman[verified]@Techjunkie_AmanPatch

An HPE Aruba switch vulnerability (CVE‑2026‑23813) allows remote reset of admin credentials; patches are available and should be applied.

kokumօtօ[verified]@__kokumotoDisclosure

CVE-2026-23813 is a critical authentication bypass in HPE Aruba AOS-CX that permits unauthenticated remote resetting of admin passwords, with a CVSS score of 9.8.

ThreatSynop[verified]@ThreatSynopDisclosure

SecurityWeek highlights CVE-2026-23813 as a critical flaw enabling unauthenticated attackers to reset passwords on Aruba switches, focusing on the vulnerability details and potential impact rather than PoC code, exploit tools, or active exploitation evidence.

IntegSec[verified]@integ_secGeneral

The text references a newly disclosed authentication bypass flaw (CVE-2026-23813) and promises business impact discussion and response guidance, but lacks concrete exploit details or remediation instructions.

Cyber Daily News[verified]@CyberDaily_NewsPatch

HPE has released a patch for CVE‑2026‑23813 affecting Aruba AOS‑CX switches, where unauthenticated attackers could reset admin passwords; the vulnerability carries a CVSS score of 9.8 and users are advised to apply the patch or isolate the management interface.

Cyber News Live[verified]@cybernewslivePatch

HPE has remedied CVE‑2026‑23813, a privilege escalation flaw that lets attackers reset admin passwords on Aruba switches; users should verify that the update has been applied.

ThreatSynop[verified]@ThreatSynopPatch

HPE has released a patch for a critical Aruba AOS‑CX authentication bypass (CVE‑2026‑23813) that could enable attackers to reset administrator passwords via the web interface; the notice stresses applying the fix promptly.

CCB Alert@CCBalertPatch

HPE released patches for several vulnerabilities in Aruba Networking AOS‑CX, including a high‑severity CVE‑2026‑23813 (CVSS 9.8) that could allow an attacker to reset an admin password.