Is CVE-2026-23823 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-23823 being exploited in the wild.

How severe is CVE-2026-23823?

High severity, with a CVSS score of 7.2, published 12 May 2026.

Which products and versions are affected?

HPE Aruba Networking AOS-10 10.7.x.x and above.

Is there a fix for CVE-2026-23823?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-23823 attacked?

It is attacked over the network, in device firmware.

Am I affected by CVE-2026-23823?

Check whether you run HPE Aruba Networking AOS-10 at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-23823: HPE Aruba AOS-10 command injection in CLI

CVE-2026-23823 · Severity: high · CVSS 7.2 · Published 2026-05-12

A security vulnerability has been identified in the management interface of HPE Aruba Networking Access Points, which provide wireless connectivity for corporate environments. An authorized user with administrative access could bypass security restrictions to run unauthorized commands on the device's underlying operating system. This could lead to a complete takeover of the access point, potentially allowing an attacker to disrupt network services or intercept traffic.

Technologies: HPE Aruba Networking AOS-10. Vendors: HPE Aruba Networking.

Quick answers

Is CVE-2026-23823 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-23823 being exploited in the wild.
How severe is CVE-2026-23823?: High severity, with a CVSS score of 7.2, published 12 May 2026.
Which products and versions are affected?: HPE Aruba Networking AOS-10 10.7.x.x and above.
Is there a fix for CVE-2026-23823?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-23823 attacked?: It is attacked over the network, in device firmware.
Am I affected by CVE-2026-23823?: Check whether you run HPE Aruba Networking AOS-10 at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A command injection vulnerability (CWE-77) exists in the Command Line Interface (CLI) of HPE Aruba Networking Access Points running AOS-10.7.x.x and above. The flaw is caused by improper neutralization of special elements within CLI inputs, allowing an attacker to escape the restricted shell. Exploitation requires network reachability to the management interface and high-privilege authentication (PR:H). If successful, a remote attacker can execute arbitrary system-level commands with the privileges of the underlying operating system, leading to full compromise of the device. Older versions such as AOS-10.4 and AOS-8 Instant are reportedly not affected.

Affected products

HPE Aruba Networking AOS-10 Access Points 10.7.x.x and above

Timeline

2026-05-12: disclosed: Initial advisory publication by HPE and NVD

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05049en_us&docLocale=en_US

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.