Skip to content
COOEY

FAIL › dossier

aruba cx 8360-24xf2c \(jl710c\)

PRODUCT

· dossier confidence 40%

The HPE Aruba CX 8360-24XF2C switch exhibits a critical security posture due to multiple unpatched vulnerabilities in its AOS-CX operating system. These vulnerabilities include unauthenticated RCEs and management interface flaws, indicating systemic weaknesses that pose significant risk to defense-industrial-base networks.

PROFILE
CategorynetworkingWhat they doHPE Aruba CX 8360-24XF2C is a high-speed Ethernet switch featuring 10/100 Gigabit Ethernet ports and 10GbASE-X connectivity.HQPalo Alto, California Websitehttps://www.arubanetworking.com ↗
SECURITY POSTURE

Critical security posture due to multiple unpatched vulnerabilities in the AOS-CX operating system, including unauthenticated RCEs and management interface flaws.

Notable failures
  • CVE-2026-73749: Unauthenticated RCE via malformed input on AOS-CX daemons
  • CVE-2026-73778: Credential Manager component vulnerability
  • CVE-2026-23813: Web-based management interface vulnerability
Patterns: repeated unpatched edge-device RCEs; systemic weaknesses in AOS-CX operating system; unauthenticated remote code execution; management interface flaws
FAILURE HISTORY · 3
DATEEVENTSEVSUMMARY
2026-09-01 CVE-2026-73749 critical An unauthenticated remote attacker can execute arbitrary code with elevated privileges on HPE AOS-CX daemons via malformed input.
2026-09-01 CVE-2026-73778 high CVE-2026-73778: A vulnerability exists in the Credential Manager component that may allow for un
2026-03-11 CVE-2026-23813 critical CVE-2026-23813: A vulnerability has been identified in the web-based management interface of AOS
Open questions: What is the exact release date of the AOS-CX operating system for this switch? · Are there any known mitigations for CVE-2026-73749 and CVE-2026-23813?
DOSSIER · dex-RAG synthesis · grounded in our own collection + trusted sourcesbuilt 2026-09-24 05:23:43.348549+00:00