What’s Vulnerable › Vulnerabilities

CVE-2024-26303

Severity: medium (CVSS 4.9 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-03-26 · updated 2026-06-17

Description

Authenticated Denial of Service Vulnerability in ArubaOS-Switch SSH Daemon

Affected products

Hewlett Packard Enterprise (HPE) ArubaOS-S Switch: through ArubaOS-Switch 16.11.xxxx: KB/WC/YA/YB/YC.16.11.0015; through ArubaOS-Switch 16.04.xxxx: KA/RA.16.04.0027; ArubaOS-Switch 16.10.xxxx: KB/WC/YA/YB/YC - All versions., ArubaOS-Switch 16.10.xxxx: WB.16.10.24 and below., ArubaOS-Switch 16.09.xxxx: All versions., ArubaOS-Switch 16.08.xxxx: All versions., ArubaOS-Switch 16.07.xxxx: All versions, ArubaOS-Switch 16.06.xxxx: All versions (+5)

References

Get alerted when CVE-2024-26303 or the next vulnerability affects your stack