Hewlett Packard Enterprise (HPE)
AOS-CX
Affected and fixed version statements observed in the public BlackTree CVE catalogue. These statements describe vulnerability scope, not publisher support entitlement.
This identity is present in BlackTree CVE records, but no product-specific publisher support or retirement history is currently registered in Lifecycle.
A missing support date does not mean the product is supported. CVE publication dates and affected-version ranges must not be interpreted as EOL dates.
CVE-observed version history
| CVE | Published | Affected versions | Fixed version information | Publisher evidence |
|---|---|---|---|---|
| CVE-2026-73783 | 1 Sep 2026 | AOS-CX: 10.18.0000 ≤ 10.18.0001, 10.17.0000 ≤ 10.17.1021, 10.16.0000 ≤ 10.16.1051, 10.13.0000 ≤ 10.13.1180, 10.10.0000 ≤ 10.10.1180 | In order to address the vulnerabilities described in the Details Section, HPE Networking recommends upgrading the HPE Aruba Networking AOS-CX software to one of the following versions (as applicable): - AOS-CX 10.10.1181 and above - AOS-CX 10.13.1190 and above - AOS-CX 10.16.1060 and above - AOS-CX 10.17.1030 and above - AOS-CX 10.18.1002 and above Software versions with resolution/fixes for the disclosed vulnerabilities can be downloaded from the HPE Networking Support Portal at: https://networkingsupport.hpe.com/home/. Product software versions that have reached End of Maintenance (EoM) are presumed to be affected by the vulnerabilities unless explicitly stated otherwise, and are not completely addressed by this security advisory. For deployments running software versions that are past End of Support (EoS), HPE Networking has not assessed exposure to the vulnerabilities referenced in this advisory. As a result, such installations should be considered potentially impacted by the listed CVE. Customers are strongly encouraged to upgrade to a supported software release to ensure proper evaluation and remediation. | Update reference ↗ |
| CVE-2026-73782 | 1 Sep 2026 | 10.18.0000 ≤ 10.18.0001; 10.17.0000 ≤ 10.17.1021; 10.16.0000 ≤ 10.16.1051; 10.13.0000 ≤ 10.13.1180; 10.10.0000 ≤ 10.10.1180 | In order to address the vulnerabilities described in the Details Section, HPE Networking recommends upgrading the HPE Aruba Networking AOS-CX software to one of the following versions (as applicable): - AOS-CX 10.10.1181 and above - AOS-CX 10.13.1190 and above - AOS-CX 10.16.1060 and above - AOS-CX 10.17.1030 and above - AOS-CX 10.18.1002 and above Software versions with resolution/fixes for the disclosed vulnerabilities can be downloaded from the HPE Networking Support Portal at: https://networkingsupport.hpe.com/home/. Product software versions that have reached End of Maintenance (EoM) are presumed to be affected by the vulnerabilities unless explicitly stated otherwise, and are not completely addressed by this security advisory. For deployments running software versions that are past End of Support (EoS), HPE Networking has not assessed exposure to the vulnerabilities referenced in this advisory. As a result, such installations should be considered potentially impacted by the listed CVE. Customers are strongly encouraged to upgrade to a supported software release to ensure proper evaluation and remediation. | Update reference ↗ |
| CVE-2026-73781 | 1 Sep 2026 | 10.18.0000 ≤ 10.18.0001; 10.17.0000 ≤ 10.17.1021; 10.16.0000 ≤ 10.16.1051; 10.13.0000 ≤ 10.13.1180; 10.10.0000 ≤ 10.10.1180 | In order to address the vulnerabilities described in the Details Section, HPE Networking recommends upgrading the HPE Aruba Networking AOS-CX software to one of the following versions (as applicable): - AOS-CX 10.10.1181 and above - AOS-CX 10.13.1190 and above - AOS-CX 10.16.1060 and above - AOS-CX 10.17.1030 and above - AOS-CX 10.18.1002 and above Software versions with resolution/fixes for the disclosed vulnerabilities can be downloaded from the HPE Networking Support Portal at: https://networkingsupport.hpe.com/home/. Product software versions that have reached End of Maintenance (EoM) are presumed to be affected by the vulnerabilities unless explicitly stated otherwise, and are not completely addressed by this security advisory. For deployments running software versions that are past End of Support (EoS), HPE Networking has not assessed exposure to the vulnerabilities referenced in this advisory. As a result, such installations should be considered potentially impacted by the listed CVE. Customers are strongly encouraged to upgrade to a supported software release to ensure proper evaluation and remediation. | Update reference ↗ |
| CVE-2026-73780 | 1 Sep 2026 | AOS-CX: 10.18.0000 ≤ 10.18.0001, 10.17.0000 ≤ 10.17.1021, 10.16.0000 ≤ 10.16.1051, 10.13.0000 ≤ 10.13.1180, 10.10.0000 ≤ 10.10.1180 | In order to address the vulnerabilities described in the Details Section, HPE Networking recommends upgrading the HPE Aruba Networking AOS-CX software to one of the following versions (as applicable): - AOS-CX 10.10.1181 and above - AOS-CX 10.13.1190 and above - AOS-CX 10.16.1060 and above - AOS-CX 10.17.1030 and above - AOS-CX 10.18.1002 and above Software versions with resolution/fixes for the disclosed vulnerabilities can be downloaded from the HPE Networking Support Portal at: https://networkingsupport.hpe.com/home/. Product software versions that have reached End of Maintenance (EoM) are presumed to be affected by the vulnerabilities unless explicitly stated otherwise, and are not completely addressed by this security advisory. For deployments running software versions that are past End of Support (EoS), HPE Networking has not assessed exposure to the vulnerabilities referenced in this advisory. As a result, such installations should be considered potentially impacted by the listed CVE. Customers are strongly encouraged to upgrade to a supported software release to ensure proper evaluation and remediation. | Update reference ↗ |
| CVE-2026-73779 | 1 Sep 2026 | 10.18.0000 ≤ 10.18.0001; 10.17.0000 ≤ 10.17.1021; 10.16.0000 ≤ 10.16.1051; 10.13.0000 ≤ 10.13.1180; 10.10.0000 ≤ 10.10.1180 | In order to address the vulnerabilities described in the Details Section, HPE Networking recommends upgrading the HPE Aruba Networking AOS-CX software to one of the following versions (as applicable): - AOS-CX 10.10.1181 and above - AOS-CX 10.13.1190 and above - AOS-CX 10.16.1060 and above - AOS-CX 10.17.1030 and above - AOS-CX 10.18.1002 and above Software versions with resolution/fixes for the disclosed vulnerabilities can be downloaded from the HPE Networking Support Portal at: https://networkingsupport.hpe.com/home/. Product software versions that have reached End of Maintenance (EoM) are presumed to be affected by the vulnerabilities unless explicitly stated otherwise, and are not completely addressed by this security advisory. For deployments running software versions that are past End of Support (EoS), HPE Networking has not assessed exposure to the vulnerabilities referenced in this advisory. As a result, such installations should be considered potentially impacted by the listed CVE. Customers are strongly encouraged to upgrade to a supported software release to ensure proper evaluation and remediation. | Update reference ↗ |
| CVE-2026-73778 | 1 Sep 2026 | 10.18.0000 ≤ 10.18.0001; 10.17.0000 ≤ 10.17.1021; 10.16.0000 ≤ 10.16.1051; 10.13.0000 ≤ 10.13.1180; 10.10.0000 ≤ 10.10.1180 | In order to address the vulnerabilities described in the Details Section, HPE Networking recommends upgrading the HPE Aruba Networking AOS-CX software to one of the following versions (as applicable): - AOS-CX 10.10.1181 and above - AOS-CX 10.13.1190 and above - AOS-CX 10.16.1060 and above - AOS-CX 10.17.1030 and above - AOS-CX 10.18.1002 and above Software versions with resolution/fixes for the disclosed vulnerabilities can be downloaded from the HPE Networking Support Portal at: https://networkingsupport.hpe.com/home/. Product software versions that have reached End of Maintenance (EoM) are presumed to be affected by the vulnerabilities unless explicitly stated otherwise, and are not completely addressed by this security advisory. For deployments running software versions that are past End of Support (EoS), HPE Networking has not assessed exposure to the vulnerabilities referenced in this advisory. As a result, such installations should be considered potentially impacted by the listed CVE. Customers are strongly encouraged to upgrade to a supported software release to ensure proper evaluation and remediation. | Update reference ↗ |
| CVE-2026-73777 | 1 Sep 2026 | 10.18.0000 ≤ 10.18.0001; 10.17.0000 ≤ 10.17.1021; 10.16.0000 ≤ 10.16.1051; 10.13.0000 ≤ 10.13.1180; 10.10.0000 ≤ 10.10.1180 | In order to address the vulnerabilities described in the Details Section, HPE Networking recommends upgrading the HPE Aruba Networking AOS-CX software to one of the following versions (as applicable): - AOS-CX 10.10.1181 and above - AOS-CX 10.13.1190 and above - AOS-CX 10.16.1060 and above - AOS-CX 10.17.1030 and above - AOS-CX 10.18.1002 and above Software versions with resolution/fixes for the disclosed vulnerabilities can be downloaded from the HPE Networking Support Portal at: https://networkingsupport.hpe.com/home/. Product software versions that have reached End of Maintenance (EoM) are presumed to be affected by the vulnerabilities unless explicitly stated otherwise, and are not completely addressed by this security advisory. For deployments running software versions that are past End of Support (EoS), HPE Networking has not assessed exposure to the vulnerabilities referenced in this advisory. As a result, such installations should be considered potentially impacted by the listed CVE. Customers are strongly encouraged to upgrade to a supported software release to ensure proper evaluation and remediation. | Update reference ↗ |
| CVE-2026-73776 | 1 Sep 2026 | 10.18.0000 ≤ 10.18.0001; 10.17.0000 ≤ 10.17.1021; 10.16.0000 ≤ 10.16.1051; 10.13.0000 ≤ 10.13.1180; 10.10.0000 ≤ 10.10.1180 | In order to address the vulnerabilities described in the Details Section, HPE Networking recommends upgrading the HPE Aruba Networking AOS-CX software to one of the following versions (as applicable): - AOS-CX 10.10.1181 and above - AOS-CX 10.13.1190 and above - AOS-CX 10.16.1060 and above - AOS-CX 10.17.1030 and above - AOS-CX 10.18.1002 and above Software versions with resolution/fixes for the disclosed vulnerabilities can be downloaded from the HPE Networking Support Portal at: https://networkingsupport.hpe.com/home/. Product software versions that have reached End of Maintenance (EoM) are presumed to be affected by the vulnerabilities unless explicitly stated otherwise, and are not completely addressed by this security advisory. For deployments running software versions that are past End of Support (EoS), HPE Networking has not assessed exposure to the vulnerabilities referenced in this advisory. As a result, such installations should be considered potentially impacted by the listed CVE. Customers are strongly encouraged to upgrade to a supported software release to ensure proper evaluation and remediation. | Update reference ↗ |
| CVE-2026-73775 | 1 Sep 2026 | 10.18.0000 ≤ 10.18.0001; 10.17.0000 ≤ 10.17.1021; 10.16.0000 ≤ 10.16.1051; 10.13.0000 ≤ 10.13.1180; 10.10.0000 ≤ 10.10.1180 | In order to address the vulnerabilities described in the Details Section, HPE Networking recommends upgrading the HPE Aruba Networking AOS-CX software to one of the following versions (as applicable): - AOS-CX 10.10.1181 and above - AOS-CX 10.13.1190 and above - AOS-CX 10.16.1060 and above - AOS-CX 10.17.1030 and above - AOS-CX 10.18.1002 and above Software versions with resolution/fixes for the disclosed vulnerabilities can be downloaded from the HPE Networking Support Portal at: https://networkingsupport.hpe.com/home/. Product software versions that have reached End of Maintenance (EoM) are presumed to be affected by the vulnerabilities unless explicitly stated otherwise, and are not completely addressed by this security advisory. For deployments running software versions that are past End of Support (EoS), HPE Networking has not assessed exposure to the vulnerabilities referenced in this advisory. As a result, such installations should be considered potentially impacted by the listed CVE. Customers are strongly encouraged to upgrade to a supported software release to ensure proper evaluation and remediation. | Update reference ↗ |
| CVE-2026-73774 | 1 Sep 2026 | 10.18.0000 ≤ 10.18.0001; 10.17.0000 ≤ 10.17.1021; 10.16.0000 ≤ 10.16.1051; 10.13.0000 ≤ 10.13.1180; 10.10.0000 ≤ 10.10.1180 | In order to address the vulnerabilities described in the Details Section, HPE Networking recommends upgrading the HPE Aruba Networking AOS-CX software to one of the following versions (as applicable): - AOS-CX 10.10.1181 and above - AOS-CX 10.13.1190 and above - AOS-CX 10.16.1060 and above - AOS-CX 10.17.1030 and above - AOS-CX 10.18.1002 and above Software versions with resolution/fixes for the disclosed vulnerabilities can be downloaded from the HPE Networking Support Portal at: https://networkingsupport.hpe.com/home/. Product software versions that have reached End of Maintenance (EoM) are presumed to be affected by the vulnerabilities unless explicitly stated otherwise, and are not completely addressed by this security advisory. For deployments running software versions that are past End of Support (EoS), HPE Networking has not assessed exposure to the vulnerabilities referenced in this advisory. As a result, such installations should be considered potentially impacted by the listed CVE. Customers are strongly encouraged to upgrade to a supported software release to ensure proper evaluation and remediation. | Update reference ↗ |
| CVE-2026-73773 | 1 Sep 2026 | 10.18.0000 ≤ 10.18.0001; 10.17.0000 ≤ 10.17.1021; 10.16.0000 ≤ 10.16.1051; 10.13.0000 ≤ 10.13.1180; 10.10.0000 ≤ 10.10.1180 | In order to address the vulnerabilities described in the Details Section, HPE Networking recommends upgrading the HPE Aruba Networking AOS-CX software to one of the following versions (as applicable): - AOS-CX 10.10.1181 and above - AOS-CX 10.13.1190 and above - AOS-CX 10.16.1060 and above - AOS-CX 10.17.1030 and above - AOS-CX 10.18.1002 and above Software versions with resolution/fixes for the disclosed vulnerabilities can be downloaded from the HPE Networking Support Portal at: https://networkingsupport.hpe.com/home/. Product software versions that have reached End of Maintenance (EoM) are presumed to be affected by the vulnerabilities unless explicitly stated otherwise, and are not completely addressed by this security advisory. For deployments running software versions that are past End of Support (EoS), HPE Networking has not assessed exposure to the vulnerabilities referenced in this advisory. As a result, such installations should be considered potentially impacted by the listed CVE. Customers are strongly encouraged to upgrade to a supported software release to ensure proper evaluation and remediation. | Update reference ↗ |
| CVE-2026-73772 | 1 Sep 2026 | 10.18.0000 ≤ 10.18.0001; 10.17.0000 ≤ 10.17.1021; 10.16.0000 ≤ 10.16.1051; 10.13.0000 ≤ 10.13.1180; 10.10.0000 ≤ 10.10.1180 | In order to address the vulnerabilities described in the Details Section, HPE Networking recommends upgrading the HPE Aruba Networking AOS-CX software to one of the following versions (as applicable): - AOS-CX 10.10.1181 and above - AOS-CX 10.13.1190 and above - AOS-CX 10.16.1060 and above - AOS-CX 10.17.1030 and above - AOS-CX 10.18.1002 and above Software versions with resolution/fixes for the disclosed vulnerabilities can be downloaded from the HPE Networking Support Portal at: https://networkingsupport.hpe.com/home/. Product software versions that have reached End of Maintenance (EoM) are presumed to be affected by the vulnerabilities unless explicitly stated otherwise, and are not completely addressed by this security advisory. For deployments running software versions that are past End of Support (EoS), HPE Networking has not assessed exposure to the vulnerabilities referenced in this advisory. As a result, such installations should be considered potentially impacted by the listed CVE. Customers are strongly encouraged to upgrade to a supported software release to ensure proper evaluation and remediation. | Update reference ↗ |
| CVE-2026-73771 | 1 Sep 2026 | 10.18.0000 ≤ 10.18.0001; 10.17.0000 ≤ 10.17.1021; 10.16.0000 ≤ 10.16.1051; 10.13.0000 ≤ 10.13.1180; 10.10.0000 ≤ 10.10.1180 | In order to address the vulnerabilities described in the Details Section, HPE Networking recommends upgrading the HPE Aruba Networking AOS-CX software to one of the following versions (as applicable): - AOS-CX 10.10.1181 and above - AOS-CX 10.13.1190 and above - AOS-CX 10.16.1060 and above - AOS-CX 10.17.1030 and above - AOS-CX 10.18.1002 and above Software versions with resolution/fixes for the disclosed vulnerabilities can be downloaded from the HPE Networking Support Portal at: https://networkingsupport.hpe.com/home/. Product software versions that have reached End of Maintenance (EoM) are presumed to be affected by the vulnerabilities unless explicitly stated otherwise, and are not completely addressed by this security advisory. For deployments running software versions that are past End of Support (EoS), HPE Networking has not assessed exposure to the vulnerabilities referenced in this advisory. As a result, such installations should be considered potentially impacted by the listed CVE. Customers are strongly encouraged to upgrade to a supported software release to ensure proper evaluation and remediation. | Update reference ↗ |
| CVE-2026-73770 | 1 Sep 2026 | 10.18.0000 ≤ 10.18.0001; 10.17.0000 ≤ 10.17.1021; 10.16.0000 ≤ 10.16.1051; 10.13.0000 ≤ 10.13.1180; 10.10.0000 ≤ 10.10.1180 | In order to address the vulnerabilities described in the Details Section, HPE Networking recommends upgrading the HPE Aruba Networking AOS-CX software to one of the following versions (as applicable): - AOS-CX 10.10.1181 and above - AOS-CX 10.13.1190 and above - AOS-CX 10.16.1060 and above - AOS-CX 10.17.1030 and above - AOS-CX 10.18.1002 and above Software versions with resolution/fixes for the disclosed vulnerabilities can be downloaded from the HPE Networking Support Portal at: https://networkingsupport.hpe.com/home/. Product software versions that have reached End of Maintenance (EoM) are presumed to be affected by the vulnerabilities unless explicitly stated otherwise, and are not completely addressed by this security advisory. For deployments running software versions that are past End of Support (EoS), HPE Networking has not assessed exposure to the vulnerabilities referenced in this advisory. As a result, such installations should be considered potentially impacted by the listed CVE. Customers are strongly encouraged to upgrade to a supported software release to ensure proper evaluation and remediation. | Update reference ↗ |
| CVE-2026-73768 | 1 Sep 2026 | 10.18.0000 ≤ 10.18.0001; 10.17.0000 ≤ 10.17.1021; 10.16.0000 ≤ 10.16.1051; 10.13.0000 ≤ 10.13.1180; 10.10.0000 ≤ 10.10.1180 | In order to address the vulnerabilities described in the Details Section, HPE Networking recommends upgrading the HPE Aruba Networking AOS-CX software to one of the following versions (as applicable): - AOS-CX 10.10.1181 and above - AOS-CX 10.13.1190 and above - AOS-CX 10.16.1060 and above - AOS-CX 10.17.1030 and above - AOS-CX 10.18.1002 and above Software versions with resolution/fixes for the disclosed vulnerabilities can be downloaded from the HPE Networking Support Portal at: https://networkingsupport.hpe.com/home/. Product software versions that have reached End of Maintenance (EoM) are presumed to be affected by the vulnerabilities unless explicitly stated otherwise, and are not completely addressed by this security advisory. For deployments running software versions that are past End of Support (EoS), HPE Networking has not assessed exposure to the vulnerabilities referenced in this advisory. As a result, such installations should be considered potentially impacted by the listed CVE. Customers are strongly encouraged to upgrade to a supported software release to ensure proper evaluation and remediation. | Update reference ↗ |
| CVE-2026-73767 | 1 Sep 2026 | 10.18.0000 ≤ 10.18.0001; 10.17.0000 ≤ 10.17.1021; 10.16.0000 ≤ 10.16.1051; 10.13.0000 ≤ 10.13.1180; 10.10.0000 ≤ 10.10.1180 | In order to address the vulnerabilities described in the Details Section, HPE Networking recommends upgrading the HPE Aruba Networking AOS-CX software to one of the following versions (as applicable): - AOS-CX 10.10.1181 and above - AOS-CX 10.13.1190 and above - AOS-CX 10.16.1060 and above - AOS-CX 10.17.1030 and above - AOS-CX 10.18.1002 and above Software versions with resolution/fixes for the disclosed vulnerabilities can be downloaded from the HPE Networking Support Portal at: https://networkingsupport.hpe.com/home/. Product software versions that have reached End of Maintenance (EoM) are presumed to be affected by the vulnerabilities unless explicitly stated otherwise, and are not completely addressed by this security advisory. For deployments running software versions that are past End of Support (EoS), HPE Networking has not assessed exposure to the vulnerabilities referenced in this advisory. As a result, such installations should be considered potentially impacted by the listed CVE. Customers are strongly encouraged to upgrade to a supported software release to ensure proper evaluation and remediation. | Update reference ↗ |
| CVE-2026-73766 | 1 Sep 2026 | 10.18.0000 ≤ 10.18.0001; 10.17.0000 ≤ 10.17.1021; 10.16.0000 ≤ 10.16.1051; 10.13.0000 ≤ 10.13.1180; 10.10.0000 ≤ 10.10.1180 | In order to address the vulnerabilities described in the Details Section, HPE Networking recommends upgrading the HPE Aruba Networking AOS-CX software to one of the following versions (as applicable): - AOS-CX 10.10.1181 and above - AOS-CX 10.13.1190 and above - AOS-CX 10.16.1060 and above - AOS-CX 10.17.1030 and above - AOS-CX 10.18.1002 and above Software versions with resolution/fixes for the disclosed vulnerabilities can be downloaded from the HPE Networking Support Portal at: https://networkingsupport.hpe.com/home/. Product software versions that have reached End of Maintenance (EoM) are presumed to be affected by the vulnerabilities unless explicitly stated otherwise, and are not completely addressed by this security advisory. For deployments running software versions that are past End of Support (EoS), HPE Networking has not assessed exposure to the vulnerabilities referenced in this advisory. As a result, such installations should be considered potentially impacted by the listed CVE. Customers are strongly encouraged to upgrade to a supported software release to ensure proper evaluation and remediation. | Update reference ↗ |
| CVE-2026-73765 | 1 Sep 2026 | 10.18.0000 ≤ 10.18.0001; 10.17.0000 ≤ 10.17.1021; 10.16.0000 ≤ 10.16.1051; 10.13.0000 ≤ 10.13.1180; 10.10.0000 ≤ 10.10.1180 | In order to address the vulnerabilities described in the Details Section, HPE Networking recommends upgrading the HPE Aruba Networking AOS-CX software to one of the following versions (as applicable): - AOS-CX 10.10.1181 and above - AOS-CX 10.13.1190 and above - AOS-CX 10.16.1060 and above - AOS-CX 10.17.1030 and above - AOS-CX 10.18.1002 and above Software versions with resolution/fixes for the disclosed vulnerabilities can be downloaded from the HPE Networking Support Portal at: https://networkingsupport.hpe.com/home/. Product software versions that have reached End of Maintenance (EoM) are presumed to be affected by the vulnerabilities unless explicitly stated otherwise, and are not completely addressed by this security advisory. For deployments running software versions that are past End of Support (EoS), HPE Networking has not assessed exposure to the vulnerabilities referenced in this advisory. As a result, such installations should be considered potentially impacted by the listed CVE. Customers are strongly encouraged to upgrade to a supported software release to ensure proper evaluation and remediation. | Update reference ↗ |
| CVE-2026-73764 | 1 Sep 2026 | 10.18.0000 ≤ 10.18.0001; 10.17.0000 ≤ 10.17.1021; 10.16.0000 ≤ 10.16.1051; 10.13.0000 ≤ 10.13.1180; 10.10.0000 ≤ 10.10.1180 | In order to address the vulnerabilities described in the Details Section, HPE Networking recommends upgrading the HPE Aruba Networking AOS-CX software to one of the following versions (as applicable): - AOS-CX 10.10.1181 and above - AOS-CX 10.13.1190 and above - AOS-CX 10.16.1060 and above - AOS-CX 10.17.1030 and above - AOS-CX 10.18.1002 and above Software versions with resolution/fixes for the disclosed vulnerabilities can be downloaded from the HPE Networking Support Portal at: https://networkingsupport.hpe.com/home/. Product software versions that have reached End of Maintenance (EoM) are presumed to be affected by the vulnerabilities unless explicitly stated otherwise, and are not completely addressed by this security advisory. For deployments running software versions that are past End of Support (EoS), HPE Networking has not assessed exposure to the vulnerabilities referenced in this advisory. As a result, such installations should be considered potentially impacted by the listed CVE. Customers are strongly encouraged to upgrade to a supported software release to ensure proper evaluation and remediation. | Update reference ↗ |
| CVE-2026-73763 | 1 Sep 2026 | 10.18.0000 ≤ 10.18.0001; 10.17.0000 ≤ 10.17.1021; 10.16.0000 ≤ 10.16.1051; 10.13.0000 ≤ 10.13.1180; 10.10.0000 ≤ 10.10.1180 | In order to address the vulnerabilities described in the Details Section, HPE Networking recommends upgrading the HPE Aruba Networking AOS-CX software to one of the following versions (as applicable): - AOS-CX 10.10.1181 and above - AOS-CX 10.13.1190 and above - AOS-CX 10.16.1060 and above - AOS-CX 10.17.1030 and above - AOS-CX 10.18.1002 and above Software versions with resolution/fixes for the disclosed vulnerabilities can be downloaded from the HPE Networking Support Portal at: https://networkingsupport.hpe.com/home/. Product software versions that have reached End of Maintenance (EoM) are presumed to be affected by the vulnerabilities unless explicitly stated otherwise, and are not completely addressed by this security advisory. For deployments running software versions that are past End of Support (EoS), HPE Networking has not assessed exposure to the vulnerabilities referenced in this advisory. As a result, such installations should be considered potentially impacted by the listed CVE. Customers are strongly encouraged to upgrade to a supported software release to ensure proper evaluation and remediation. | Update reference ↗ |
| CVE-2026-73762 | 1 Sep 2026 | 10.18.0000 ≤ 10.18.0001; 10.17.0000 ≤ 10.17.1021; 10.16.0000 ≤ 10.16.1051; 10.13.0000 ≤ 10.13.1180; 10.10.0000 ≤ 10.10.1180 | In order to address the vulnerabilities described in the Details Section, HPE Networking recommends upgrading the HPE Aruba Networking AOS-CX software to one of the following versions (as applicable): - AOS-CX 10.10.1181 and above - AOS-CX 10.13.1190 and above - AOS-CX 10.16.1060 and above - AOS-CX 10.17.1030 and above - AOS-CX 10.18.1002 and above Software versions with resolution/fixes for the disclosed vulnerabilities can be downloaded from the HPE Networking Support Portal at: https://networkingsupport.hpe.com/home/. Product software versions that have reached End of Maintenance (EoM) are presumed to be affected by the vulnerabilities unless explicitly stated otherwise, and are not completely addressed by this security advisory. For deployments running software versions that are past End of Support (EoS), HPE Networking has not assessed exposure to the vulnerabilities referenced in this advisory. As a result, such installations should be considered potentially impacted by the listed CVE. Customers are strongly encouraged to upgrade to a supported software release to ensure proper evaluation and remediation. | Update reference ↗ |
| CVE-2026-73761 | 1 Sep 2026 | 10.18.0000 ≤ 10.18.0001; 10.17.0000 ≤ 10.17.1021; 10.16.0000 ≤ 10.16.1051; 10.13.0000 ≤ 10.13.1180; 10.10.0000 ≤ 10.10.1180 | In order to address the vulnerabilities described in the Details Section, HPE Networking recommends upgrading the HPE Aruba Networking AOS-CX software to one of the following versions (as applicable): - AOS-CX 10.10.1181 and above - AOS-CX 10.13.1190 and above - AOS-CX 10.16.1060 and above - AOS-CX 10.17.1030 and above - AOS-CX 10.18.1002 and above Software versions with resolution/fixes for the disclosed vulnerabilities can be downloaded from the HPE Networking Support Portal at: https://networkingsupport.hpe.com/home/. Product software versions that have reached End of Maintenance (EoM) are presumed to be affected by the vulnerabilities unless explicitly stated otherwise, and are not completely addressed by this security advisory. For deployments running software versions that are past End of Support (EoS), HPE Networking has not assessed exposure to the vulnerabilities referenced in this advisory. As a result, such installations should be considered potentially impacted by the listed CVE. Customers are strongly encouraged to upgrade to a supported software release to ensure proper evaluation and remediation. | Update reference ↗ |
| CVE-2026-73760 | 1 Sep 2026 | 10.18.0000 ≤ 10.18.0001; 10.17.0000 ≤ 10.17.1021; 10.16.0000 ≤ 10.16.1051; 10.13.0000 ≤ 10.13.1180; 10.10.0000 ≤ 10.10.1180 | In order to address the vulnerabilities described in the Details Section, HPE Networking recommends upgrading the HPE Aruba Networking AOS-CX software to one of the following versions (as applicable): - AOS-CX 10.10.1181 and above - AOS-CX 10.13.1190 and above - AOS-CX 10.16.1060 and above - AOS-CX 10.17.1030 and above - AOS-CX 10.18.1002 and above Software versions with resolution/fixes for the disclosed vulnerabilities can be downloaded from the HPE Networking Support Portal at: https://networkingsupport.hpe.com/home/. Product software versions that have reached End of Maintenance (EoM) are presumed to be affected by the vulnerabilities unless explicitly stated otherwise, and are not completely addressed by this security advisory. For deployments running software versions that are past End of Support (EoS), HPE Networking has not assessed exposure to the vulnerabilities referenced in this advisory. As a result, such installations should be considered potentially impacted by the listed CVE. Customers are strongly encouraged to upgrade to a supported software release to ensure proper evaluation and remediation. | Update reference ↗ |
| CVE-2026-73759 | 1 Sep 2026 | AOS-CX: 10.18.0000 ≤ 10.18.0001, 10.17.0000 ≤ 10.17.1021, 10.16.0000 ≤ 10.16.1051, 10.13.0000 ≤ 10.13.1180, 10.10.0000 ≤ 10.10.1180 | In order to address the vulnerabilities described in the Details Section, HPE Networking recommends upgrading the HPE Aruba Networking AOS-CX software to one of the following versions (as applicable): - AOS-CX 10.10.1181 and above - AOS-CX 10.13.1190 and above - AOS-CX 10.16.1060 and above - AOS-CX 10.17.1030 and above - AOS-CX 10.18.1002 and above Software versions with resolution/fixes for the disclosed vulnerabilities can be downloaded from the HPE Networking Support Portal at: https://networkingsupport.hpe.com/home/. Product software versions that have reached End of Maintenance (EoM) are presumed to be affected by the vulnerabilities unless explicitly stated otherwise, and are not completely addressed by this security advisory. For deployments running software versions that are past End of Support (EoS), HPE Networking has not assessed exposure to the vulnerabilities referenced in this advisory. As a result, such installations should be considered potentially impacted by the listed CVE. Customers are strongly encouraged to upgrade to a supported software release to ensure proper evaluation and remediation. | Update reference ↗ |
| CVE-2026-73758 | 1 Sep 2026 | 10.18.0000 ≤ 10.18.0001; 10.17.0000 ≤ 10.17.1021; 10.16.0000 ≤ 10.16.1051; 10.13.0000 ≤ 10.13.1180; 10.10.0000 ≤ 10.10.1180 | In order to address the vulnerabilities described in the Details Section, HPE Networking recommends upgrading the HPE Aruba Networking AOS-CX software to one of the following versions (as applicable): - AOS-CX 10.10.1181 and above - AOS-CX 10.13.1190 and above - AOS-CX 10.16.1060 and above - AOS-CX 10.17.1030 and above - AOS-CX 10.18.1002 and above Software versions with resolution/fixes for the disclosed vulnerabilities can be downloaded from the HPE Networking Support Portal at: https://networkingsupport.hpe.com/home/. Product software versions that have reached End of Maintenance (EoM) are presumed to be affected by the vulnerabilities unless explicitly stated otherwise, and are not completely addressed by this security advisory. For deployments running software versions that are past End of Support (EoS), HPE Networking has not assessed exposure to the vulnerabilities referenced in this advisory. As a result, such installations should be considered potentially impacted by the listed CVE. Customers are strongly encouraged to upgrade to a supported software release to ensure proper evaluation and remediation. | Update reference ↗ |
| CVE-2026-73757 | 1 Sep 2026 | 10.18.0000 ≤ 10.18.0001; 10.17.0000 ≤ 10.17.1021; 10.16.0000 ≤ 10.16.1051; 10.13.0000 ≤ 10.13.1180; 10.10.0000 ≤ 10.10.1180 | In order to address the vulnerabilities described in the Details Section, HPE Networking recommends upgrading the HPE Aruba Networking AOS-CX software to one of the following versions (as applicable): - AOS-CX 10.10.1181 and above - AOS-CX 10.13.1190 and above - AOS-CX 10.16.1060 and above - AOS-CX 10.17.1030 and above - AOS-CX 10.18.1002 and above Software versions with resolution/fixes for the disclosed vulnerabilities can be downloaded from the HPE Networking Support Portal at: https://networkingsupport.hpe.com/home/. Product software versions that have reached End of Maintenance (EoM) are presumed to be affected by the vulnerabilities unless explicitly stated otherwise, and are not completely addressed by this security advisory. For deployments running software versions that are past End of Support (EoS), HPE Networking has not assessed exposure to the vulnerabilities referenced in this advisory. As a result, such installations should be considered potentially impacted by the listed CVE. Customers are strongly encouraged to upgrade to a supported software release to ensure proper evaluation and remediation. | Update reference ↗ |
| CVE-2026-73756 | 1 Sep 2026 | 10.18.0000 ≤ 10.18.0001; 10.17.0000 ≤ 10.17.1021; 10.16.0000 ≤ 10.16.1051; 10.13.0000 ≤ 10.13.1180; 10.10.0000 ≤ 10.10.1180 | In order to address the vulnerabilities described in the Details Section, HPE Networking recommends upgrading the HPE Aruba Networking AOS-CX software to one of the following versions (as applicable): - AOS-CX 10.10.1181 and above - AOS-CX 10.13.1190 and above - AOS-CX 10.16.1060 and above - AOS-CX 10.17.1030 and above - AOS-CX 10.18.1002 and above Software versions with resolution/fixes for the disclosed vulnerabilities can be downloaded from the HPE Networking Support Portal at: https://networkingsupport.hpe.com/home/. Product software versions that have reached End of Maintenance (EoM) are presumed to be affected by the vulnerabilities unless explicitly stated otherwise, and are not completely addressed by this security advisory. For deployments running software versions that are past End of Support (EoS), HPE Networking has not assessed exposure to the vulnerabilities referenced in this advisory. As a result, such installations should be considered potentially impacted by the listed CVE. Customers are strongly encouraged to upgrade to a supported software release to ensure proper evaluation and remediation. | Update reference ↗ |
| CVE-2026-73755 | 1 Sep 2026 | 10.18.0000 ≤ 10.18.0001; 10.17.0000 ≤ 10.17.1021; 10.16.0000 ≤ 10.16.1051; 10.13.0000 ≤ 10.13.1180; 10.10.0000 ≤ 10.10.1180 | In order to address the vulnerabilities described in the Details Section, HPE Networking recommends upgrading the HPE Aruba Networking AOS-CX software to one of the following versions (as applicable): - AOS-CX 10.10.1181 and above - AOS-CX 10.13.1190 and above - AOS-CX 10.16.1060 and above - AOS-CX 10.17.1030 and above - AOS-CX 10.18.1002 and above Software versions with resolution/fixes for the disclosed vulnerabilities can be downloaded from the HPE Networking Support Portal at: https://networkingsupport.hpe.com/home/. Product software versions that have reached End of Maintenance (EoM) are presumed to be affected by the vulnerabilities unless explicitly stated otherwise, and are not completely addressed by this security advisory. For deployments running software versions that are past End of Support (EoS), HPE Networking has not assessed exposure to the vulnerabilities referenced in this advisory. As a result, such installations should be considered potentially impacted by the listed CVE. Customers are strongly encouraged to upgrade to a supported software release to ensure proper evaluation and remediation. | Update reference ↗ |
| CVE-2026-73754 | 1 Sep 2026 | 10.18.0000 ≤ 10.18.0001; 10.17.0000 ≤ 10.17.1021; 10.16.0000 ≤ 10.16.1051; 10.13.0000 ≤ 10.13.1180; 10.10.0000 ≤ 10.10.1180 | In order to address the vulnerabilities described in the Details Section, HPE Networking recommends upgrading the HPE Aruba Networking AOS-CX software to one of the following versions (as applicable): - AOS-CX 10.10.1181 and above - AOS-CX 10.13.1190 and above - AOS-CX 10.16.1060 and above - AOS-CX 10.17.1030 and above - AOS-CX 10.18.1002 and above Software versions with resolution/fixes for the disclosed vulnerabilities can be downloaded from the HPE Networking Support Portal at: https://networkingsupport.hpe.com/home/. Product software versions that have reached End of Maintenance (EoM) are presumed to be affected by the vulnerabilities unless explicitly stated otherwise, and are not completely addressed by this security advisory. For deployments running software versions that are past End of Support (EoS), HPE Networking has not assessed exposure to the vulnerabilities referenced in this advisory. As a result, such installations should be considered potentially impacted by the listed CVE. Customers are strongly encouraged to upgrade to a supported software release to ensure proper evaluation and remediation. | Update reference ↗ |
| CVE-2026-73753 | 1 Sep 2026 | AOS-CX: 10.18.0000 ≤ 10.18.0001, 10.17.0000 ≤ 10.17.1021, 10.16.0000 ≤ 10.16.1051, 10.13.0000 ≤ 10.13.1180, 10.10.0000 ≤ 10.10.1180 | In order to address the vulnerabilities described in the Details Section, HPE Networking recommends upgrading the HPE Aruba Networking AOS-CX software to one of the following versions (as applicable): - AOS-CX 10.10.1181 and above - AOS-CX 10.13.1190 and above - AOS-CX 10.16.1060 and above - AOS-CX 10.17.1030 and above - AOS-CX 10.18.1002 and above Software versions with resolution/fixes for the disclosed vulnerabilities can be downloaded from the HPE Networking Support Portal at: https://networkingsupport.hpe.com/home/. Product software versions that have reached End of Maintenance (EoM) are presumed to be affected by the vulnerabilities unless explicitly stated otherwise, and are not completely addressed by this security advisory. For deployments running software versions that are past End of Support (EoS), HPE Networking has not assessed exposure to the vulnerabilities referenced in this advisory. As a result, such installations should be considered potentially impacted by the listed CVE. Customers are strongly encouraged to upgrade to a supported software release to ensure proper evaluation and remediation. | Update reference ↗ |
| CVE-2026-73752 | 1 Sep 2026 | AOS-CX: 10.18.0000 ≤ 10.18.0001, 10.17.0000 ≤ 10.17.1021, 10.16.0000 ≤ 10.16.1051, 10.13.0000 ≤ 10.13.1180, 10.10.0000 ≤ 10.10.1180 | In order to address the vulnerabilities described in the Details Section, HPE Networking recommends upgrading the HPE Aruba Networking AOS-CX software to one of the following versions (as applicable): - AOS-CX 10.10.1181 and above - AOS-CX 10.13.1190 and above - AOS-CX 10.16.1060 and above - AOS-CX 10.17.1030 and above - AOS-CX 10.18.1002 and above Software versions with resolution/fixes for the disclosed vulnerabilities can be downloaded from the HPE Networking Support Portal at: https://networkingsupport.hpe.com/home/. Product software versions that have reached End of Maintenance (EoM) are presumed to be affected by the vulnerabilities unless explicitly stated otherwise, and are not completely addressed by this security advisory. For deployments running software versions that are past End of Support (EoS), HPE Networking has not assessed exposure to the vulnerabilities referenced in this advisory. As a result, such installations should be considered potentially impacted by the listed CVE. Customers are strongly encouraged to upgrade to a supported software release to ensure proper evaluation and remediation. | Update reference ↗ |
| CVE-2026-73751 | 1 Sep 2026 | AOS-CX: 10.18.0000 ≤ 10.18.0001, 10.17.0000 ≤ 10.17.1021, 10.16.0000 ≤ 10.16.1051, 10.13.0000 ≤ 10.13.1180, 10.10.0000 ≤ 10.10.1180 | In order to address the vulnerabilities described in the Details Section, HPE Networking recommends upgrading the HPE Aruba Networking AOS-CX software to one of the following versions (as applicable): - AOS-CX 10.10.1181 and above - AOS-CX 10.13.1190 and above - AOS-CX 10.16.1060 and above - AOS-CX 10.17.1030 and above - AOS-CX 10.18.1002 and above Software versions with resolution/fixes for the disclosed vulnerabilities can be downloaded from the HPE Networking Support Portal at: https://networkingsupport.hpe.com/home/. Product software versions that have reached End of Maintenance (EoM) are presumed to be affected by the vulnerabilities unless explicitly stated otherwise, and are not completely addressed by this security advisory. For deployments running software versions that are past End of Support (EoS), HPE Networking has not assessed exposure to the vulnerabilities referenced in this advisory. As a result, such installations should be considered potentially impacted by the listed CVE. Customers are strongly encouraged to upgrade to a supported software release to ensure proper evaluation and remediation. | Update reference ↗ |
| CVE-2026-73750 | 1 Sep 2026 | AOS-CX: 10.18.0000 ≤ 10.18.0001, 10.17.0000 ≤ 10.17.1021, 10.16.0000 ≤ 10.16.1051, 10.13.0000 ≤ 10.13.1180, 10.10.0000 ≤ 10.10.1180 | In order to address the vulnerabilities described in the Details Section, HPE Networking recommends upgrading the HPE Aruba Networking AOS-CX software to one of the following versions (as applicable): - AOS-CX 10.10.1181 and above - AOS-CX 10.13.1190 and above - AOS-CX 10.16.1060 and above - AOS-CX 10.17.1030 and above - AOS-CX 10.18.1002 and above Software versions with resolution/fixes for the disclosed vulnerabilities can be downloaded from the HPE Networking Support Portal at: https://networkingsupport.hpe.com/home/. Product software versions that have reached End of Maintenance (EoM) are presumed to be affected by the vulnerabilities unless explicitly stated otherwise, and are not completely addressed by this security advisory. For deployments running software versions that are past End of Support (EoS), HPE Networking has not assessed exposure to the vulnerabilities referenced in this advisory. As a result, such installations should be considered potentially impacted by the listed CVE. Customers are strongly encouraged to upgrade to a supported software release to ensure proper evaluation and remediation. | Update reference ↗ |
| CVE-2026-73749 | 1 Sep 2026 | AOS-CX: 10.18.0000 ≤ 10.18.0001, 10.17.0000 ≤ 10.17.1021, 10.16.0000 ≤ 10.16.1051, 10.13.0000 ≤ 10.13.1180, 10.10.0000 ≤ 10.10.1180 | In order to address the vulnerabilities described in the Details Section, HPE Networking recommends upgrading the HPE Aruba Networking AOS-CX software to one of the following versions (as applicable): - AOS-CX 10.10.1181 and above - AOS-CX 10.13.1190 and above - AOS-CX 10.16.1060 and above - AOS-CX 10.17.1030 and above - AOS-CX 10.18.1002 and above Software versions with resolution/fixes for the disclosed vulnerabilities can be downloaded from the HPE Networking Support Portal at: https://networkingsupport.hpe.com/home/. Product software versions that have reached End of Maintenance (EoM) are presumed to be affected by the vulnerabilities unless explicitly stated otherwise, and are not completely addressed by this security advisory. For deployments running software versions that are past End of Support (EoS), HPE Networking has not assessed exposure to the vulnerabilities referenced in this advisory. As a result, such installations should be considered potentially impacted by the listed CVE. Customers are strongly encouraged to upgrade to a supported software release to ensure proper evaluation and remediation. | Update reference ↗ |
| CVE-2026-63454 | 21 Jul 2026 | 10.17.0000 ≤ 10.17.1020; 10.16.0000 ≤ 10.16.1050; 10.13.0000 ≤ 10.13.1180; 10.18.0000 < 10.18.0001 | To address the vulnerabilities described above in the affected software branches, it is recommended to upgrade HPE Networking AOS-CX to one of the following versions (as applicable): - AOS-CX 10.18.xxxx: AOS-CX 10.18.0001 and above - AOS-CX 10.17.xxxx: AOS-CX 10.17.1021 and above - AOS-CX 10.16.xxxx: AOS-CX 10.16.1050 and above - AOS-CX 10.13.xxxx: AOS-CX 10.13.1180 and above Software versions with resolution/fixes for the vulnerabilities covered above can be downloaded from the HPE Networking Support Portal at https://networkingsupport.hpe.com/home/ NOTE: CVE-2026-63454 is resolved in AOS-CX 10.13.1190. Customers running this software branch that are unable to upgrade to a newer software branch are advised to use the available workaround until this resolved version becomes publicly available. HPE Aruba Networking does not evaluate or patch software branches that have reached their End of Maintenance (EoM) milestone. For more information about HPE Aruba Networking End of Life policy please visit: https://www.hpe.com/psnow/doc/a00143052enw | Update reference ↗ |
| CVE-2026-63453 | 21 Jul 2026 | 10.17.0000 ≤ 10.17.1020; 10.16.0000 ≤ 10.16.1050; 10.13.0000 ≤ 10.13.1170; 10.18.0000 < 10.18.0001 | To address the vulnerabilities described above in the affected software branches, it is recommended to upgrade HPE Networking AOS-CX to one of the following versions (as applicable): - AOS-CX 10.18.xxxx: AOS-CX 10.18.0001 and above - AOS-CX 10.17.xxxx: AOS-CX 10.17.1021 and above - AOS-CX 10.16.xxxx: AOS-CX 10.16.1050 and above - AOS-CX 10.13.xxxx: AOS-CX 10.13.1180 and above Software versions with resolution/fixes for the vulnerabilities covered above can be downloaded from the HPE Networking Support Portal at https://networkingsupport.hpe.com/home/ HPE Aruba Networking does not evaluate or patch software branches that have reached their End of Maintenance (EoM) milestone. For more information about HPE Aruba Networking End of Life policy please visit: https://www.hpe.com/psnow/doc/a00143052enw | Update reference ↗ |
| CVE-2026-44880 | 21 Jul 2026 | 10.17.0000 ≤ 10.17.1020; 10.16.0000 ≤ 10.16.1050; 10.13.0000 ≤ 10.13.1170; 10.18.0000 < 10.18.0001 | To address the vulnerabilities described above in the affected software branches, it is recommended to upgrade HPE Networking AOS-CX to one of the following versions (as applicable): - AOS-CX 10.18.xxxx: AOS-CX 10.18.0001 and above - AOS-CX 10.17.xxxx: AOS-CX 10.17.1021 and above - AOS-CX 10.16.xxxx: AOS-CX 10.16.1050 and above - AOS-CX 10.13.xxxx: AOS-CX 10.13.1180 and above Software versions with resolution/fixes for the vulnerabilities covered above can be downloaded from the HPE Networking Support Portal at https://networkingsupport.hpe.com/home/ HPE Aruba Networking does not evaluate or patch software branches that have reached their End of Maintenance (EoM) milestone. For more information about HPE Aruba Networking End of Life policy please visit: https://www.hpe.com/psnow/doc/a00143052enw | Update reference ↗ |
| CVE-2026-23817 | 11 Mar 2026 | 10.17.0000 ≤ 10.17.0001; 10.16.0000 ≤ 10.16.1020; 10.13.0000 ≤ 10.13.1101; 10.10.0000 ≤ 10.10.1170 | To address the vulnerabilities described above in the affected software branches, it is recommended to upgrade HPE Networking AOS-CX to one of the following versions (as applicable): - AOS-CX 10.17.xxxx: AOS-CX 10.17.1001 and above - AOS-CX 10.16.xxxx: AOS-CX 10.16.1030 and above - AOS-CX 10.13.xxxx: AOS-CX 10.13.1161 and above - AOS-CX 10.10.xxxx: AOS-CX 10.10.1180 and above Software versions with resolution/fixes for the vulnerabilities covered above can be downloaded from the HPE Networking Support Portal at https://networkingsupport.hpe.com/home/ HPE Aruba Networking does not evaluate or patch software branches that have reached their End of Maintenance (EoM) milestone. For more information about HPE Aruba Networking End of Life policy please visit: https://www.hpe.com/psnow/doc/a00143052enw | Update reference ↗ |
| CVE-2026-23816 | 11 Mar 2026 | AOS-CX: 10.17.0000 ≤ 10.17.0001, 10.16.0000 ≤ 10.16.1020, 10.13.0000 ≤ 10.13.1101, 10.10.0000 ≤ 10.10.1170 | To address the vulnerabilities described above in the affected software branches, it is recommended to upgrade HPE Networking AOS-CX to one of the following versions (as applicable): - AOS-CX 10.17.xxxx: AOS-CX 10.17.1001 and above - AOS-CX 10.16.xxxx: AOS-CX 10.16.1030 and above - AOS-CX 10.13.xxxx: AOS-CX 10.13.1161 and above - AOS-CX 10.10.xxxx: AOS-CX 10.10.1180 and above Software versions with resolution/fixes for the vulnerabilities covered above can be downloaded from the HPE Networking Support Portal at https://networkingsupport.hpe.com/home/ HPE Aruba Networking does not evaluate or patch software branches that have reached their End of Maintenance (EoM) milestone. For more information about HPE Aruba Networking End of Life policy please visit: https://www.hpe.com/psnow/doc/a00143052enw | Update reference ↗ |
| CVE-2026-23815 | 11 Mar 2026 | AOS-CX: 10.17.0000 ≤ 10.17.0001, 10.16.0000 ≤ 10.16.1020, 10.13.0000 ≤ 10.13.1101, 10.10.0000 ≤ 10.10.1170 | To address the vulnerabilities described above in the affected software branches, it is recommended to upgrade HPE Networking AOS-CX to one of the following versions (as applicable): - AOS-CX 10.17.xxxx: AOS-CX 10.17.1001 and above - AOS-CX 10.16.xxxx: AOS-CX 10.16.1030 and above - AOS-CX 10.13.xxxx: AOS-CX 10.13.1161 and above - AOS-CX 10.10.xxxx: AOS-CX 10.10.1180 and above Software versions with resolution/fixes for the vulnerabilities covered above can be downloaded from the HPE Networking Support Portal at https://networkingsupport.hpe.com/home/ HPE Aruba Networking does not evaluate or patch software branches that have reached their End of Maintenance (EoM) milestone. For more information about HPE Aruba Networking End of Life policy please visit: https://www.hpe.com/psnow/doc/a00143052enw | Update reference ↗ |
| CVE-2026-23814 | 11 Mar 2026 | AOS-CX: 10.17.0000 ≤ 10.17.0001, 10.16.0000 ≤ 10.16.1020, 10.13.0000 ≤ 10.13.1101, 10.10.0000 ≤ 10.10.1170 | To address the vulnerabilities described above in the affected software branches, it is recommended to upgrade HPE Networking AOS-CX to one of the following versions (as applicable): - AOS-CX 10.17.xxxx: AOS-CX 10.17.1001 and above - AOS-CX 10.16.xxxx: AOS-CX 10.16.1030 and above - AOS-CX 10.13.xxxx: AOS-CX 10.13.1161 and above - AOS-CX 10.10.xxxx: AOS-CX 10.10.1180 and above Software versions with resolution/fixes for the vulnerabilities covered above can be downloaded from the HPE Networking Support Portal at https://networkingsupport.hpe.com/home/ HPE Aruba Networking does not evaluate or patch software branches that have reached their End of Maintenance (EoM) milestone. For more information about HPE Aruba Networking End of Life policy please visit: https://www.hpe.com/psnow/doc/a00143052enw | Update reference ↗ |
| CVE-2026-23813 | 11 Mar 2026 | AOS-CX: 10.17.0000 ≤ 10.17.0001, 10.16.0000 ≤ 10.16.1020, 10.13.0000 ≤ 10.13.1160, 10.10.0000 ≤ 10.10.1170 | To address the vulnerabilities described above in the affected software branches, it is recommended to upgrade HPE Networking AOS-CX to one of the following versions (as applicable): - AOS-CX 10.17.xxxx: AOS-CX 10.17.1001 and above - AOS-CX 10.16.xxxx: AOS-CX 10.16.1030 and above - AOS-CX 10.13.xxxx: AOS-CX 10.13.1161 and above - AOS-CX 10.10.xxxx: AOS-CX 10.10.1180 and above Software versions with resolution/fixes for the vulnerabilities covered above can be downloaded from the HPE Networking Support Portal at https://networkingsupport.hpe.com/home/ HPE Aruba Networking does not evaluate or patch software branches that have reached their End of Maintenance (EoM) milestone. For more information about HPE Aruba Networking End of Life policy please visit: https://www.hpe.com/psnow/doc/a00143052enw | Update reference ↗ |
| CVE-2025-27080 | 18 Mar 2025 | 10.10.0000 ≤ <=10.10.1140; 10.13.0000 ≤ <=10.13.1070; 10.14.0000 ≤ <=10.14.1030; 10.15.0000 ≤ <=10.15.1000 | To address the vulnerabilities described above in the affected software branches, it is recommended to upgrade HPE Aruba Networking AOS-CX to one of the following versions (as applicable): - AOS-CX 10.15.1001 - AOS-CX 10.14.1040 - AOS-CX 10.13.1080 - AOS-CX 10.10.1150 Software versions with resolution/fixes for the vulnerabilities covered above can be downloaded from the HPE Networking Support Portal at https://networkingsupport.hpe.com/home/ | Update reference ↗ |
| CVE-2025-25042 | 18 Mar 2025 | 10.10.0000 ≤ <=10.10.1140; 10.13.0000 ≤ <=10.13.1070; 10.14.0000 ≤ <=10.14.1030; 10.15.0000 ≤ <=10.15.1000 | To address the vulnerabilities described above in the affected software branches, it is recommended to upgrade HPE Aruba Networking AOS-CX to one of the following versions (as applicable): - AOS-CX 10.15.1001 - AOS-CX 10.14.1040 - AOS-CX 10.13.1080 - AOS-CX 10.10.1150 Software versions with resolution/fixes for the vulnerabilities covered above can be downloaded from the HPE Networking Support Portal at https://networkingsupport.hpe.com/home/ | Update reference ↗ |
| CVE-2025-25040 | 18 Mar 2025 | AOS-CX: 10.14.0000 ≤ <=10.14.1040, 10.15.0000 ≤ <=10.15.1000 | To address the vulnerabilities described above in the affected software branches, it is recommended to upgrade HPE Aruba Networking AOS-CX to one of the following versions (as applicable): - AOS-CX 10.15.1001 - AOS-CX 10.14.1040 - AOS-CX 10.13.1080 - AOS-CX 10.10.1150 Software versions with resolution/fixes for the vulnerabilities covered above can be downloaded from the HPE Networking Support Portal at https://networkingsupport.hpe.com/home/ | Update reference ↗ |
| CVE-2024-54010 | 8 Jan 2025 | AOS-CX: Version 10.10.0000: 10.10.1140 and below ≤ <=10.10.1140, Version 10.13.0000: 10.13.1060 and below ≤ <=10.13.1060, Version 10.14.0000: 10.14.1020 and below ≤ <=10.14.1020, Version 10.15.0000: 10.15.0005 and below ≤ <=10.15.0005 | Upgrade affected HPE Aruba Networking CX 10000 Series switches to one of the following HPE Aruba Networking CX Operating System branches and versions (as applicable) to resolve the vulnerability described in the details section: - AOS-CX 10.15.xxxx: 10.15.1000 and above - AOS-CX 10.14.xxxx: 10.14.1030 and above - AOS-CX 10.13.xxxx: 10.13.1070 and above Note: AOS-CX 10.10.xxxx will not receive fixes for this vulnerability due to regression complications. Upgrading to AOS-CX 10.13.1070 and above will address it. Software versions with resolution/fixes for the vulnerability covered above, can be downloaded from the HPE Networking Support Portal. https://networkingsupport.hpe.com/home/ HPE Aruba Networking does not evaluate or patch product versions that have reached their End of Maintenance (EoM) milestone. For more information about HPE Aruba Networking product's End of Support policy, visit the HPE Networking Support Portal at https://networkingsupport.hpe.com/ Following are the supported HPE Aruba Networking CX Operating System software branches for the CX 10000 series switches as of the publication date of this advisory: - AOS-CX 10.15.xxxx - AOS-CX 10.14.xxxx - AOS-CX 10.13.xxxx - AOS-CX 10.10.xxxx | Update reference ↗ |
How this record is maintained
The CVE inventory is reconciled automatically from cve.blacktree.nl. Exact identity matches link to existing Lifecycle product or package histories. Unmatched products stay in a prioritised publisher-source research queue, and Lifecycle marks the date gap instead of inferring a support boundary from vulnerability data.