Aruba HiSpeed Cache versions up to 3.0.4 suffer from a missing authorization vulnerability that arises from improperly configured access control security levels. This allows an unauthenticated attacker to exploit the system remotely over the network without user interaction, resulting in limited confidentiality and integrity compromise. The vulnerability is tracked as CVE-2026-23545 with a CVSS 3.1 base score of 6.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N). No known exploits are reported in the wild, and no patch or vendor advisory is currently available.

The vulnerability allows unauthorized remote attackers to bypass access controls, potentially leading to limited disclosure and modification of data within Aruba HiSpeed Cache. There is no impact on system availability. The medium severity reflects the potential for confidentiality and integrity loss without requiring privileges or user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, review and tighten access control configurations on Aruba HiSpeed Cache instances to mitigate risk. Monitor vendor channels for updates and apply patches promptly once available.