CVE-2026-101156: Security Advisory 0192
Published Oct 6, 2026
·Updated
A stored cross-site scripting (XSS) vulnerability may allow an authenticated, high-privilege administrator to store malicious content in a configuration. The content may execute in another authenticated user's browser when that user views or compares the affected configuration. Successful exploitation may allow the attacker to act through the victim's authenticated browser session to access sensitive data, modify configurations, or disrupt managed wireless services.
Affected Software
1 affected component
HPE Aruba Networking Aruba Central On-Premises
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 2026.2.1Patch Security Advisory 0192
Event History
Oct 6, 2026
CVE Published
via MITRE·07:40 PM
Data Sourced
via MITRE·07:40 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·08:17 PM
DescriptionSeverityWeakness