High · published September 2, 2026
A signature verification bypass vulnerability exists in the command line interface of AOS-CX. Successful exploitation could allow an authenticated malicious actor with administrative privileges to execute arbitrary code on the underlying operating system, when certain pre-conditions outside of the attacker’s control are met.
| Product | Versions | Fixed in |
|---|---|---|
| hpe/arubaos-cx | ≤ 10.10.1180 | — |
| hpe/arubaos-cx | ≥ 10.13.0000, ≤ 10.13.1180 | — |
| hpe/arubaos-cx | ≥ 10.16.0000, ≤ 10.16.1051 | — |
| hpe/arubaos-cx | ≥ 10.17.0000, ≤ 10.17.1021 | — |
| hpe/arubaos-cx | all versions | — |