Medium · published September 2, 2026
An out-of-bounds read vulnerability exists in the underlying operating system of AOS-CX that could lead to unauthenticated information disclosure by sending a specially crafted packet. Successful exploitation of this vulnerability results in the ability to disclose sensitive information from the underlying operating system.
| Product | Versions | Fixed in |
|---|---|---|
| hpe/arubaos-cx | ≤ 10.10.1180 | — |
| hpe/arubaos-cx | ≥ 10.13.0000, ≤ 10.13.1180 | — |
| hpe/arubaos-cx | ≥ 10.16.0000, ≤ 10.16.1051 | — |
| hpe/arubaos-cx | ≥ 10.17.0000, ≤ 10.17.1021 | — |
| hpe/arubaos-cx | all versions | — |