High · published September 2, 2026
Vulnerabilities in the API endpoint of AOS-CX could allow a remote attacker authenticated with low privileges to access sensitive information. A successful exploit allows an attacker to retrieve information which could be used to potentially gain further access to network services supported by AOS-CX.
| Product | Versions | Fixed in |
|---|---|---|
| hpe/arubaos-cx | ≤ 10.10.1180 | — |
| hpe/arubaos-cx | ≥ 10.13.0000, ≤ 10.13.1180 | — |
| hpe/arubaos-cx | ≥ 10.16.0000, ≤ 10.16.1051 | — |
| hpe/arubaos-cx | ≥ 10.17.0000, ≤ 10.17.1021 | — |
| hpe/arubaos-cx | all versions | — |