Several vulnerabilities (CVE-2026-23813, CVE-2026-23814, CVE-2026-23815, CVE-2026-23816, CVE-2026-23817) were identified in HPE Aruba Networking products. A remote attacker could exploit some of these vulnerabilities to trigger authentication bypass and arbitrary code execution on the targeted system. Issues affect:

• Lower versions of AOS-CX 10.17.xxxx: AOS-CX 10.17.1001;
• Lower versions of AOS-CX 10.16.xxxx: AOS-CX 10.16.1030;
• Lower versions of AOS-CX 10.13.xxxx: AOS-CX 10.13.1161;
• Lower versions of AOS-CX 10.10.xxxx: AOS-CX 10.10.1180.

More information on vulnerabilities and updates is available in HPE Aruba Networking security bulletins – hpe.com