Skip to content
Sign in
5.7 Medium

CVE-2026-73755 Privilege Escalation via Unauthorized Access to Sensitive Session Information

Description

A privilege escalation vulnerability exists in the API endpoint of AOS-CX. Successful exploitation could allow an authenticated low-privilege operator user, after a required user action, to access sensitive information from the vulnerable system.

CVSS 3.1 detail

Vector CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N

Exploitable remotely over the network, with an ordinary account and if a user takes an action; an attacker can seriously compromise confidentiality, integrity or availability.

Attack vector
Network
Attack complexity
Low
Privileges required
Low
Interaction
Required
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None

Affected products and versions

Product Affected versions Fixed in
AOS-CX 10.18 10.18.0000 → 10.18.0001 No fix stated
AOS-CX 10.17 10.17.0000 → 10.17.1021 No fix stated
AOS-CX 10.16 10.16.0000 → 10.16.1051 No fix stated
AOS-CX 10.13 10.13.0000 → 10.13.1180 No fix stated
AOS-CX 10.10 10.10.0000 → 10.10.1180 No fix stated

Other CVEs of AOS-CX

The 46 CVEs of AOS-CX →
CVE-2026-73783 Stack overflow vulnerabilities exist in an API endpoint of AOS-CX 4.9 Medium CVE-2026-73782 A format string vulnerability exists in the command line interface of AOS-CX that could lead to unauthenticated remote… 8.8 High CVE-2026-73781 A vulnerability in the web-based management interface of AOS-CX could allow an authenticated remote attacker to… 8.4 High CVE-2026-73780 A vulnerability in the web-based management interface of AOS-CX switches exposes some sessions to a lack of Cross-Site… 8.3 High
Track this CVE