Skip to content
8.8 High

CVE-2026-73752 An unauthenticated arbitrary file write vulnerability exists in an API endpoint of AOS-CX

Description

An unauthenticated arbitrary file write vulnerability exists in an API endpoint of AOS-CX. Successful exploitation of this vulnerability allows an attacker to write arbitrary files to the underlying operating system, which could lead to remote code execution.

Affected products and versions

Product Affected versions Fixed in
AOS-CX 10.18 10.18.0000 → 10.18.0001 No fix stated
AOS-CX 10.17 10.17.0000 → 10.17.1021 No fix stated
AOS-CX 10.16 10.16.0000 → 10.16.1051 No fix stated
AOS-CX 10.13 10.13.0000 → 10.13.1180 No fix stated
AOS-CX 10.10 10.10.0000 → 10.10.1180 No fix stated
The 46 CVEs of AOS-CX →
Track this CVE