CVE-2026-23813 Authentication Bypass in Web Interface allows Unauthenticated Admin Password Reset

A vulnerability has been identified in the web-based management interface of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. In some cases this could enable resetting the admin password...

CVE-2026-23813 Authentication Bypass in Web Interface allows Unauthenticated Admin Password Reset

A vulnerability has been identified in the web-based management interface of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. In some cases this could enable resetting the admin password...

PT-2026-24570

Name of the Vulnerable Software and Affected Versions AOS-CX Switches affected versions not specified Description A flaw exists in a custom binary within the AOS-CX Switches' Command Line Interface CLI. A remotely authenticated attacker with high privileges can exploit this issue to inject...

PT-2026-24571

Name of the Vulnerable Software and Affected Versions AOS-CX Switches affected versions not specified Description A flaw exists in the command line interface of AOS-CX Switches that could allow a remote attacker with valid credentials to execute arbitrary commands on the operating system...

PT-2026-24569

Name of the Vulnerable Software and Affected Versions AOS-CX affected versions not specified Description A flaw exists in the command parameters of a specific AOS-CX CLI command. A low-privilege authenticated remote attacker could exploit this to inject malicious commands, potentially causing...

PT-2026-24572

Name of the Vulnerable Software and Affected Versions AOS-CX Switches affected versions not specified Description A flaw exists in the web-based management interface that could allow a remote attacker who does not need to be authenticated to redirect users to a URL of the attacker’s choosing...

HPE Aruba Networking AOS-CX 安全漏洞

HPE Aruba Networking AOS-CX is a series of switch devices produced by the American company HPE. HPE Aruba Networking AOS-CX has security vulnerabilities; these vulnerabilities stem from specific CLI command parameters that allow for command injection, potentially allowing low-privilege,...

HPESBNW05027 rev.1 - HPE Aruba Networking AOS-CX, Multiple Vulnerabilities

Potential Security Impact: Remote: Access Restriction Bypass, Code Execution, URL Redirection SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba CX 10000 Switch Series -- Please refer to the Vulnerability Summary section of this bulletin for details on impacted versions Aruba C...

Malicious Package

Overview cx-web-themes is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

CVE-2025-15314

Tanium addressed an arbitrary file deletion vulnerability in end-user-cx...

CVE-2025-15314

Tanium addressed an arbitrary file deletion vulnerability in end-user-cx...

Tanium end-user-cx 安全漏洞

Tanium end-user-cx is a terminal tool extension provided by the American company Tanium. There is a security vulnerability in Tanium end-user-cx, which stems from the ability to delete arbitrary files...

CVE-2025-15314

Tanium addressed an arbitrary file deletion vulnerability in end-user-cx...

CVE-2025-15314 Tanium addressed an arbitrary file deletion vulnerability in end-user-cx.

Tanium addressed an arbitrary file deletion vulnerability in end-user-cx...

CVE-2025-15314

Technical details about CVE-2025-15314 (affected products, affected components, root cause, impact, and remediation specifics) are not publicly available in the provided documents. Monitor for updates from the vendor and standard vulnerability feeds.

CVE-2025-15314 Tanium addressed an arbitrary file deletion vulnerability in end-user-cx.

Tanium addressed an arbitrary file deletion vulnerability in end-user-cx...

CVE-2025-15555

A security flaw has been discovered in Open5GS up to 2.7.6. Affected by this vulnerability is the function hssogsdiamcxmarcb of the file src/hss/hss-cx-path.c of the component VoLTE Cx-Test. The manipulation of the argument OGSKEYLEN results in stack-based buffer overflow. The attack may be...

CVE-2025-15555

Open5GS up to 2.7.6 contains a stack-based buffer overflow in hss_ogs_diam_cx_mar_cb (src/hss/hss-cx-path.c) within the VoLTE Cx-Test component. The vulnerability is triggered by manipulation of the OGS_KEY_LEN argument and can be exploited remotely. A patch identified as 54dda041211098730221d0ae...

CVE-2025-15555 Open5GS VoLTE Cx-Test hss-cx-path.c hss_ogs_diam_cx_mar_cb stack-based overflow

A security flaw has been discovered in Open5GS up to 2.7.6. Affected by this vulnerability is the function hssogsdiamcxmarcb of the file src/hss/hss-cx-path.c of the component VoLTE Cx-Test. The manipulation of the argument OGSKEYLEN results in stack-based buffer overflow. The attack may be...

CVE-2025-15555

A security flaw has been discovered in Open5GS up to 2.7.6. Affected by this vulnerability is the function hssogsdiamcxmarcb of the file src/hss/hss-cx-path.c of the component VoLTE Cx-Test. The manipulation of the argument OGSKEYLEN results in stack-based buffer overflow. The attack may be...