Back to the CVE list
CVE-2026-23816

OS command injection in Hpe Arubaos Cx

CVSS score

8.8

EPSS probability

%1.2

Risk score

0.1

Published

7 mo ago

OverviewPublic Exploits (0)NewsroomVulnerability Timeline
Patch status has not yet been verified

Resmî kaynaklarda yeterli kanıt bulunamadı. Bu sonuç “yama yok” anlamına gelmez.

Impact on My Inventory

Only the personal products you have added to your account are assessed; an organisation's inventory does not appear here.

Checking session…

Vulnerability description

DayBreach CVE AI Research

CVE-2026-23816 has vendor, distribution, patch and security-source records on file. We can compare them and prepare an explanation linked to the evidence.

A vulnerability in the command line interface of AOS-CX Switches could allow an authenticated remote attacker to execute arbitrary commands on the underlying operating system.

IMPACT: Affected Products and Software

Affected Products

The following products are affected by CVE-2026-23816 vulnerability. Where our threat engine knows the exact affected versions, they are listed below.

IDVENDORPRODUCTACTION
1hpearubaos-cx View
2hpearubaos-cx View
3hpearubaos-cx View
4hpearubaos-cx View
5hpearuba cx 10000-48y6c (r8p13a) View
6hpearuba cx 10000-48y6c (r8p14a) View
7hpearuba cx 10000-48y6c (s0f98a) View
8hpearuba cx 10040 (s4r58a) View
9hpearuba cx 10040 32p (s4r54a) View
10hpearuba cx 10040 32p (s4r55a) View
11hpearuba cx 10040 32p (s4r56a) View
12hpearuba cx 4100i 12-port (jl817a) View
13hpearuba cx 4100i 24-port (jl818a) View
14hpearuba cx 6000 12g (r8n89a) View
15hpearuba cx 6000 12p (r8n89b) View
16hpearuba cx 6000 12p (s4r21a) View
17hpearuba cx 6000 24g (r8n87a) View
18hpearuba cx 6000 24g (r8n88a) View
19hpearuba cx 6000 24p (r8n87b) View
20hpearuba cx 6000 24p (r8n88b) View
21hpearuba cx 6000 24p (s4r26a) View
22hpearuba cx 6000 24p (s4r27a) View
23hpearuba cx 6000 48g (r8n85a) View
24hpearuba cx 6000 48g (r8n86a) View
25hpearuba cx 6000 48g (r9y03a) View
26hpearuba cx 6000 48p (r8n85b) View
27hpearuba cx 6000 48p (r8n86b) View
28hpearuba cx 6000 48p (r9y03b) View
29hpearuba cx 6000 48p (s4r20a) View
30hpearuba cx 6000 48p (s4r24a) View
31hpearuba cx 6000 48p (s4r25a) View
32hpearuba cx 6000 8p (s4r22a) View
33hpearuba cx 6000 8p (s4r23a) View
34hpearuba cx 6000 8p (s4r28a) View
35hpearuba cx 6000 8p (s4r29a) View
36hpearuba cx 6100 12g (jl679a) View
37hpearuba cx 6100 24g (jl677a) View
38hpearuba cx 6100 24g (jl678a) View
39hpearuba cx 6100 48g (jl675a) View
40hpearuba cx 6100 48g (jl676a) View
41hpearuba cx 6100 48g (r9y04a) View
42hpearuba cx 6200f 12g (r8q72a) View
43hpearuba cx 6200f 12g (r8v13a) View
44hpearuba cx 6200f 24g (jl724b) View
45hpearuba cx 6200f 24g (jl725b) View
46hpearuba cx 6200f 24g (s0g13a) View
47hpearuba cx 6200f 24g (s0g14a) View
48hpearuba cx 6200f 24g (s0m81a) View
49hpearuba cx 6200f 24g (s0m82a) View
50hpearuba cx 6200f 24g (s0m86a) View
51hpearuba cx 6200f 24g (s0m87a) View
52hpearuba cx 6200f 48g (jl726b) View
53hpearuba cx 6200f 48g (jl727b) View
54hpearuba cx 6200f 48g (jl728b) View
55hpearuba cx 6200f 48g (s0g15a) View
56hpearuba cx 6200f 48g (s0g16a) View
57hpearuba cx 6200f 48g (s0g17a) View
58hpearuba cx 6200f 48g (s0m83a) View
59hpearuba cx 6200f 48g (s0m84a) View
60hpearuba cx 6200f 48g (s0m85a) View
61hpearuba cx 6200f 48g (s0m88a) View
62hpearuba cx 6200f 48g (s0m89a) View
63hpearuba cx 6200f 48g (s0m90a) View
64hpearuba cx 6200m 24g (r8q67a) View
65hpearuba cx 6200m 24g (r8q68a) View
66hpearuba cx 6200m 24g (r8v08a) View
67hpearuba cx 6200m 24g (r8v09a) View
68hpearuba cx 6200m 36g (r8q71a) View
69hpearuba cx 6200m 36g (r8v12a) View
70hpearuba cx 6200m 48g (r8q69a) View
71hpearuba cx 6200m 48g (r8q70a) View
72hpearuba cx 6200m 48g (r8v10a) View
73hpearuba cx 6200m 48g (r8v11a) View
74hpearuba cx 6300f 24 (jl666a) View
75hpearuba cx 6300f 24 (jl668a) View
76hpearuba cx 6300f 24p (s0g96a) View
77hpearuba cx 6300f 24p (s0g98a) View
78hpearuba cx 6300f 48 (jl665a) View
79hpearuba cx 6300f 48 (jl667a) View
80hpearuba cx 6300f 48p (s0g95a) View
81hpearuba cx 6300f 48p (s0g97a) View
82hpearuba cx 6300m 16p (s4p41a) View
83hpearuba cx 6300m 16p (s4p45a) View
84hpearuba cx 6300m 24 (jl658a) View
85hpearuba cx 6300m 24 (jl660a) View
86hpearuba cx 6300m 24 (jl662a) View
87hpearuba cx 6300m 24 (jl664a) View
88hpearuba cx 6300m 24p (r8s89a) View
89hpearuba cx 6300m 24p (r8s92a) View
90hpearuba cx 6300m 24p (s0f99a) View
91hpearuba cx 6300m 24p (s0g01a) View
92hpearuba cx 6300m 24p (s0g03a) View
93hpearuba cx 6300m 24p (s0g05a) View
94hpearuba cx 6300m 24p (s4p44a) View
95hpearuba cx 6300m 24p (s4p48a) View
96hpearuba cx 6300m 24p (s5z46a) View
97hpearuba cx 6300m 32p (s4p42a) View
98hpearuba cx 6300m 32p (s4p46a) View
99hpearuba cx 6300m 48 (jl659a) View
100hpearuba cx 6300m 48 (jl661a) View
101hpearuba cx 6300m 48 (jl663a) View
102hpearuba cx 6300m 48 (jl762a) View
103hpearuba cx 6300m 48p (r8s90a) View
104hpearuba cx 6300m 48p (s0g00a) View
105hpearuba cx 6300m 48p (s0g02a) View
106hpearuba cx 6300m 48p (s0g04a) View
107hpearuba cx 6300m 48p (s0g06a) View
108hpearuba cx 6300m 48p (s0x44a) View
109hpearuba cx 6300m 48p (s4p43a) View
110hpearuba cx 6300m 48p (s4p47a) View
111hpearuba cx 6300m 48sr5 (r8s91a) View
112hpearuba cx 6405 (r0x26a) View
113hpearuba cx 6405 48sfp+8sfp56 (r0x30a) View
114hpearuba cx 6405 96g (r0x29a) View
115hpearuba cx 6405 v2 (r0x26c) View
116hpearuba cx 6410 (r0x27a) View
117hpearuba cx 6410 96g (jl741a) View
118hpearuba cx 6410 v2 (r0x27c) View
119hpearuba cx 8320 32 (jl579a) View
120hpearuba cx 8320 48 (jl479a) View
121hpearuba cx 8320 48 (jl581a) View
122hpearuba cx 8325-32c (jl626a) View
123hpearuba cx 8325-32c (jl627a) View
124hpearuba cx 8325-48y8c (jl624a) View
125hpearuba cx 8325-48y8c (jl625a) View
126hpearuba cx 8325-48y8c (jl858a) View
127hpearuba cx 8325h-16c (s4b22a) View
128hpearuba cx 8325h-16c (s4b24a) View
129hpearuba cx 8325h-18y4c (s4b21a) View
130hpearuba cx 8325h-18y4c (s4b23a) View
131hpearuba cx 8325p-32c (s0g07a) View
132hpearuba cx 8325p-32c (s0g08a) View
133hpearuba cx 8360-12c (jl708c) View
134hpearuba cx 8360-12c (jl709c) View
135hpearuba cx 8360-16y2c (jl702c) View
136hpearuba cx 8360-16y2c (jl703c) View
137hpearuba cx 8360-24xf2c (jl710c) View
138hpearuba cx 8360-24xf2c (jl711c) View
139hpearuba cx 8360-32y4c (jl700c) View
140hpearuba cx 8360-32y4c (jl701c) View
141hpearuba cx 8360-48xt4c (jl706c) View
142hpearuba cx 8360-48xt4c (jl707c) View
143hpearuba cx 8360-48y6c (jl704c) View
144hpearuba cx 8360-48y6c (jl705c) View
145hpearuba cx 8400 (jl376a) View
146hpearuba cx 8400 8-slot chassis (jl375a) View
147hpearuba cx 9300 (r8z97a) View
148hpearuba cx 9300 (r8z98a) View
149hpearuba cx 9300 (r8z99a) View
150hpearuba cx 9300 (r9a00a) View
151hpearuba cx 9300 32d (r8z96a) View
152hpearuba cx 9300 32d (r9a29a) View
153hpearuba cx 9300 32d (r9a30a) View
154hpearuba cx 9300s 32p (s0f81a) View
155hpearuba cx 9300s 32p (s0f82a) View
156hpearuba cx 9300s 32p (s0f83a) View
157hpearuba cx 9300s 32p (s0f84a) View
158hpearuba cx 9300s 32p (s0f87a) View
159hpearuba cx 9300s 32p (s0f88a) View
Total affected vendors: 1|Products: 159

RED HAT CSAF/VEX: Product Impact Check

Red Hat has not yet published a CSAF/VEX impact record for this CVE. This does not mean “not affected”.

SCORING: CVSS from Multiple Sources

CVSS Scores

The Common Vulnerability Scoring System is a standardised framework for assessing the severity of vulnerabilities in software and systems. We collect and display CVSS scores from several sources for each CVE.

SCOREVERSIONSEVERITYVECTORSOURCE
8.8CVSS V31HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HNVD
7.2CVSS V31HIGHCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HNVD

Patch and Remediation Guide

Solution & Remediation Advisory

Patch status unknown

İncelenen resmî kaynaklarda yama durumu doğrulanamadı. Bu sonuç “yama yok” anlamına gelmez.

Confirm the affected product and version against the source evidence above.
Restrict access to internet-facing services and apply network segmentation.
Until a patch is confirmed, follow the vendor advisory; do not read an unknown status as “no patch”.
Monitor server logs and network endpoints for signs of anomalous execution.

Public exploit and active exploitation status

Verified exploit intelligence

No verified public PoC, exploit repository or Metasploit module has been found for this CVE yet.

Weakness Classification and Attack Patterns (CWE & CAPEC)

CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorises the common flaws or weaknesses that can lead to vulnerabilities. CVE-2026-23816 is associated with the following CWEs:

CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2026-23816 weaknesses.

CAPEC-66: SQL InjectionCAPEC-126: Path TraversalCAPEC-28: OS Command Injection

Attack Vector and Accessibility

ExposureAğ üzerinden
PermissionsLow
UserGerekmiyor

Official Sources and Advisories

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05027en_us&docLocale=en_USvendor-advisory

CVSS Vector Radar Chart

8.8 / 10
Attack VectorNetworkComplexityLowPrivilegesLowUser Interact.NoneConfidentialityLowIntegrityNoneAvailabilityHigh

Vulnerability Scoring Details

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack VectorNetwork
Attack ComplexityLow
Privileges RequiredLow privileges
User InteractionNone required
Confidentiality (Gizlilik)Low
Integrity (Bütünlük)None
Availability (Erişilebilirlik)High

Yama durumu bilinmiyor

İncelenen resmî kaynaklarda yama durumu doğrulanamadı. Bu sonuç “yama yok” anlamına gelmez.

Follow the vendor

H
hpe logo
hpe

Weakness Type (CWE & CAPEC)

CWE-78

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free keyDocumentation
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.enginteksut.com.tr/api/v1/intel/cves/CVE-2026-23816"