Critical Flaw in HPE Aruba Switches Exposes Admin Controls

What Happened

A major security issue has been uncovered in HPE Aruba Networking's AOS-CX^? switch software, and it’s a big deal. The critical flaw, CVE-2026-23813, allows remote attackers to take full control of network switches without needing any credentials. This vulnerability has a staggering score of 9.8 out of 10 on the CVSSv3.1^? scale, indicating just how severe it is.

The problem lies in the web-based management interface^? of AOS-CX^? switches. Attackers can exploit this flaw without any authentication^?, privileges, or user interaction, making it alarmingly easy to trigger over the network. HPE’s advisory indicates that this vulnerability could even allow attackers to reset the admin password, giving them unfettered access to the network.

The vulnerability was discovered by a researcher named “moonv” through HPE’s bug bounty program. Alongside this critical flaw, the advisory also highlights three other high-severity vulnerabilities in the command-line interface (CLI)^? and a medium-rated flaw that allows open redirect^?s in the web interface. These vulnerabilities further increase the risk to organizations using these switches, as they can lead to unauthorized command execution and potential system compromise.

Why Should You Care

If you’re using HPE Aruba switches, this is a wake-up call. The potential for attackers to gain administrative control means they could disrupt your entire network or compromise sensitive data. Imagine someone breaking into your home and having the ability to change the locks or access your valuables without you even knowing.

This vulnerability isn't just a technical issue; it can have real-world consequences for your business. Whether you’re managing a small office or a large data center, the risk of unauthorized access to your network devices can lead to significant operational disruptions and financial losses. Protecting your network is crucial in today’s interconnected world.

What's Being Done

HPE Aruba Networking is taking this issue seriously and has released patches^? for the vulnerabilities. Here’s what you should do if you’re affected:

• Apply the latest patches to your AOS-CX^? software immediately.
• Isolate switch management interfaces to a dedicated Layer 2 segment or VLAN to limit exposure.
• Enforce strict firewall policies to control access to these devices.

Experts are watching for any signs of exploitation in the wild, as the vulnerabilities affect a wide range of AOS-CX^? deployments. Stay vigilant and keep your systems updated to protect against potential attacks.