HPE Aruba AOS-CX Multiple Vulnerabilities Advisory (RCE via CVE-2026-44880, CVE-2026-63453, Path Traversal)

Vulnerability Overview HPE Aruba Networking has released AOS-CX software patches to address multiple security vulnerabilities. These vulnerabilities include: 1. Low-Privilege Authentication Buffer Overflow Vulnerability (CVE-2026-44880) - Description: A buffer overflow vulnerability was discovered in the command-line interface of AOS-CX. Successful exploitation of this vulnerability may allow a remote low-privileged user to execute arbitrary code on the underlying operating system with privileged user privileges. - CVSS v3.1 Base Score: 8.8 - CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 2. Authentication Buffer Overflow Vulnerability (CVE-2026-63453) - Description: A buffer overflow vulnerability exists in the command-line interface of AOS-CX. Successful exploitation of this vulnerability may allow a remote high-privileged user to execute arbitrary code on the underlying operating system with privileged user privileges. - CVSS v3.1 Base Score: 7.2 - CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H 3. Authentication Path Traversal Vulnerability (CVE-2026-63454) - Description: An authentication path traversal vulnerability exists in AOS-CX. Successful exploitation of this vulnerability may allow an attacker to copy arbitrary files to a user-readable location from the command-line interface, leading to remote code execution. - CVSS v3.1 Base Score: 7.2 - CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H 4. Vulnerability in the AOS-CX SSH Daemon (CVE-2026-35387) - Description: A vulnerability exists in versions prior to OpenSSH 10.3, which may cause incorrect application of ECDSA algorithm restrictions. When ECDSA algorithms are specified in the or configuration options, OpenSSH may incorrectly interpret this as allowing all ECDSA algorithms, rather than only the explicitly listed ones. - CVSS v3.1 Base Score: 6.5 - CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Products Affected Products: - AOS-CX 10.13.xxxx: 10.13.1070 and earlier - AOS-CX 10.16.xxxx: 10.16.1040 and earlier - AOS-CX 10.17.xxxx: 10.17.1010 and earlier Unaffected Products: - Any other HPE Aruba Networking products not explicitly listed above are not affected by these vulnerabilities. Remediation Recommended Measures: - Restrict management interfaces to dedicated Layer 2 segments/VLANs and use firewall policies at Layer 3 and above for control, while implementing accounting controls to track and log user activities and resource usage. - For CVE-2026-35387, it is recommended to use non-ECDSA algorithms until the system can be patched. If this is not possible, it is recommended to restrict management interfaces to dedicated Layer 2 segments/VLANs and use firewall policies at Layer 3 and above for control, while implementing accounting controls to track and log user activities and resource usage. Software Versions: - It is recommended to upgrade to one of the following software versions (where applicable): - AOS-CX 10.18.xxxx: AOS-CX 10.18.0001 and later - AOS-CX 10.17.xxxx: AOS-CX 10.17.1021 and later - AOS-CX 10.16.xxxx: AOS-CX 10.16.1051 and later - AOS-CX 10.13.xxxx: AOS-CX 10.13.1180 and later Note: - CVE-2026-63454 is addressed in AOS-CX 10.13.1190. Customers unable to upgrade to a new software branch should use available workarounds until the workaround is publicly available. Additional Information References: - HPE Networking Support Portal - Flawed Logic in Encryption Algorithm selection within AOS-CX SSH daemon (CVE-2026-35387) Version History: - Version 1 (rev1) - Initial release on July 21, 2026 Third-Party Security Patches: - Security patches for systems running Hewlett Packard Enterprise (HPE) software products should be installed in accordance with the customer's security patch management policy. Support: - For consulting services on implementing the recommendations in this security advisory, please contact the normal HPE service support channels. For other questions regarding the content of this security advisory, please email security-alert@hpe.com. Reporting: - To report potential security vulnerabilities: - Web form: https://www.hpe.com/h20195/v2/GetPDF.aspx?cname=4A65-6988CHN - Email: security-alert@hpe.com - Hewlett Packard Enterprise Product Security Response Policy Subscription: - Subscribe to receive future HPE security advisories: http://www.hpe.com/support/Security_Bulletin_Archive Security Advisory Archive: - List of recently released security advisories: http://www.hpe.com/support/Security_Bulletin_Archive Disclaimer: - HPE widely distributes this security advisory to bring attention to the affected HPE products. HPE does not guarantee the accuracy or completeness of this information and assumes no responsibility for any damages resulting from the use or misuse of the information contained in this security advisory. Copyright: - © 2026 Hewlett Packard Enterprise Development LP Privacy Policy: - Privacy Policy

Goal Reached Thanks to every supporter — we hit 100%!

HPE Aruba AOS-CX Multiple Vulnerabilities Advisory (RCE via CVE-2026-44880, CVE-2026-63453, Path Traversal)

More from this source