CVE-2026-23814 - Vulnerability Analysis

Overview

AOS-CX contains a command injection caused by improper sanitization of command parameters in CLI commands, letting low-privilege authenticated remote attackers execute malicious commands.

Severity & Score

Impact

Low-privilege authenticated attackers can execute arbitrary commands, potentially compromising system integrity.

Mitigation

Update to the latest version with the fix applied.

References

• https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05027en_us&docLocale=en_US

Social Media Activity(1 post)

TheHackerWire

@thehackerwire

Mar 11, 2026

🟠 CVE-2026-23814 - High (8.8) A vulnerability in the command parameters of a certain AOS-CX CLI command could allow a low-privilege authenticated remote attacker to inject malicious commands resulting in unwanted behavior. 🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-23814/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner