Not scored
CVE-2026-23813
Authentication Bypass in Web Interface allows Unauthenticated Admin Password Reset
Status
- Not in CISA KEV
Exploit probabilityEPSSchecked 25 Oct
0.8%probability of exploitation in the next 30 days
Higher than 55% of scored CVEs
SeverityCVSS
–Not scored yet
Description NVD
A vulnerability has been identified in the web-based management interface of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. In some cases this could enable resetting the admin password.
Coverage 3 articles · 3 outlets
See the full timelineShow as table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| Wed 11 Mar · 11:43 UTC | Security Affairs | Hewlett Packard Enterprise fixes critical authentication bypass in Aruba AOS-CX |
| Wed 11 Mar · 12:44 UTC | The Hacker News | Dozens of Vendors Patch Security Flaws Across Enterprise Software and Network Devices |
| Sat 14 Mar · 10:59 UTC | SecurityWeek | Critical HPE AOS-CX Vulnerability Allows Admin Password Resets |
- Critical HPE AOS-CX Vulnerability Allows Admin Password ResetsSecurityWeek
- Dozens of Vendors Patch Security Flaws Across Enterprise Software and Network DevicesThe Hacker News · mentions it in passing
- Hewlett Packard Enterprise fixes critical authentication bypass in Aruba AOS-CXSecurity Affairs · first in our coverage