Skip to content
Sign in
6.4 Medium

CVE-2026-73757 A vulnerability in the web-based management interface of AOS-CX could allow an authenticated remote attacker to…

Description

A vulnerability in the web-based management interface of AOS-CX could allow an authenticated remote attacker to conduct a server-side request forgery (SSRF) attack. A successful exploit allows an attacker to enumerate information about the internal structure of the AOS-CX host, leading to potential disclosure and limited modification of sensitive information.

Affected products and versions

Product Affected versions Fixed in
AOS-CX 10.18 10.18.0000 → 10.18.0001 No fix stated
AOS-CX 10.17 10.17.0000 → 10.17.1021 No fix stated
AOS-CX 10.16 10.16.0000 → 10.16.1051 No fix stated
AOS-CX 10.13 10.13.0000 → 10.13.1180 No fix stated
AOS-CX 10.10 10.10.0000 → 10.10.1180 No fix stated

Other CVEs of AOS-CX

The 46 CVEs of AOS-CX →
CVE-2026-73783 Stack overflow vulnerabilities exist in an API endpoint of AOS-CX 4.9 Medium CVE-2026-73782 A format string vulnerability exists in the command line interface of AOS-CX that could lead to unauthenticated remote… 8.8 High CVE-2026-73781 A vulnerability in the web-based management interface of AOS-CX could allow an authenticated remote attacker to… 8.4 High CVE-2026-73780 A vulnerability in the web-based management interface of AOS-CX switches exposes some sessions to a lack of Cross-Site… 8.3 High
Track this CVE