Medium · published September 2, 2026
A vulnerability in an API endpoint of AOS-CX could allow a remote unauthenticated attacker to obtain sensitive information via a man-in-the-middle attack. Successful exploitation allows an attacker to retrieve data which could be used to further compromise the confidentiality of the affected system.
| Product | Versions | Fixed in |
|---|---|---|
| hpe/arubaos-cx | ≤ 10.10.1180 | — |
| hpe/arubaos-cx | ≥ 10.13.0000, ≤ 10.13.1180 | — |
| hpe/arubaos-cx | ≥ 10.16.0000, ≤ 10.16.1051 | — |
| hpe/arubaos-cx | ≥ 10.17.0000, ≤ 10.17.1021 | — |
| hpe/arubaos-cx | all versions | — |