HPE Aruba Alert: Critical CVSS 9.8 Patch for AOS-CX

HPE Aruba Networking has released an emergency patch for its AOS-CX switch software to address a critical vulnerability (CVE-2026-23813) with a CVSS score of 9.8. The flaw allow unauthenticated remote attackers to bypass security controls and reset administrator passwords.

Immediate Remediation Required

The vulnerability affects a wide range of Aruba CX series switches used in enterprise data centers. Security researchers warn that exploitation could lead to total network takeover. Administrators are urged to apply the update immediately or restrict access to management interfaces as a temporary mitigation.