Skip to content
CVE PROGRAM SOURCE RECORD7.2 High

CVE-2026-23816

Authenticated Command Injection found in admin AOS-CX CLI command

Description

A vulnerability in the command line interface of AOS-CX Switches could allow an authenticated remote attacker to execute arbitrary commands on the underlying operating system.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Hewlett Packard Enterprise (HPE) AOS-CX

Default version status: affected

  • 10.17.0000 to ≤ 10.17.0001affected
  • 10.16.0000 to ≤ 10.16.1020affected
  • 10.13.0000 to ≤ 10.13.1101affected
  • 10.10.0000 to ≤ 10.10.1170affected

References