Known vulnerabilities in Hewlett Packard Enterprise (HPE) AOS-CX
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-73783 | Stack overflow vulnerabilities exist in an API endpoint of AOS-CX | 4.9 Medium | Sep 1, 2026 |
| CVE-2026-73782 | A format string vulnerability exists in the command line interface of AOS-CX that could lead to unauthenticated remote… | 8.8 High | Sep 1, 2026 |
| CVE-2026-73781 | A vulnerability in the web-based management interface of AOS-CX could allow an authenticated remote attacker to… | 8.4 High | Sep 1, 2026 |
| CVE-2026-73780 | A vulnerability in the web-based management interface of AOS-CX switches exposes some sessions to a lack of Cross-Site… | 8.3 High | Sep 1, 2026 |
| CVE-2026-73779 | Vulnerabilities have been identified in the operating system of AOS-CX switches that could potentially allow an… | 8.2 High | Sep 1, 2026 |
| CVE-2026-73778 | A vulnerability exists in the Credential Manager component that may allow for unauthorized administrative access | 8.1 High | Sep 1, 2026 |
| CVE-2026-73777 | Vulnerabilities have been identified in the API endpoint of AOS-CX switches that could potentially allow an… | 8.1 High | Sep 1, 2026 |
| CVE-2026-73776 | A signature verification bypass vulnerability exists in the command line interface of AOS-CX | 7.9 High | Sep 1, 2026 |
| CVE-2026-73775 | Vulnerabilities in the API endpoint of AOS-CX could allow a remote attacker authenticated with low privileges to… | 7.7 High | Sep 1, 2026 |
| CVE-2026-73774 | A buffer overflow vulnerability exists in the underlying operating system of AOS-CX that could lead to unauthenticated… | 7.6 High | Sep 1, 2026 |
| CVE-2026-73773 | An unauthenticated Denial-of-Service (DoS) vulnerability exists in the API endpoint of AOS-CX | 7.5 High | Sep 1, 2026 |
| CVE-2026-73772 | Buffer overflow vulnerabilities exist in an underlying service of AOS-CX that could lead to an unauthenticated… | 6.5 Medium | Sep 1, 2026 |
| CVE-2026-73771 | An authentication vulnerability exists in the AOS-CX management interface and API that may allow improper authentication… | 7.5 High | Sep 1, 2026 |
| CVE-2026-73770 | An authenticated arbitrary file write vulnerability exists in AOS-CX | 7.3 High | Sep 1, 2026 |
| CVE-2026-73768 | A vulnerability exists in the command line interface of AOS-CX that may allow for improper processing of malformed input | 7.3 High | Sep 1, 2026 |
| CVE-2026-73767 | Authenticated command injection vulnerabilities exist in the command line interface of AOS-CX | 7.2 High | Sep 1, 2026 |
| CVE-2026-73766 | Command injection vulnerabilities in the API endpoint of AOS-CX could allow an authenticated remote attacker with… | 7.2 High | Sep 1, 2026 |
| CVE-2026-73765 | Authenticated path traversal vulnerabilities exist in API endpoints of AOS-CX | 7.2 High | Sep 1, 2026 |
| CVE-2026-73764 | Vulnerabilities have been identified in the operating system of AOS-CX switches that could potentially allow an… | 7.1 High | Sep 1, 2026 |
| CVE-2026-73763 | A vulnerability exists in a management component that could allow an unauthenticated adjacent attacker to execute… | 7.1 High | Sep 1, 2026 |
| CVE-2026-73762 | A vulnerability has been identified in the API endpoint of AOS-CX that could allow a remote actor to circumvent existing… | 6.6 Medium | Sep 1, 2026 |
| CVE-2026-73761 | An out-of-bounds read vulnerability exists in the underlying operating system of AOS-CX that could lead to… | 6.5 Medium | Sep 1, 2026 |
| CVE-2026-73760 | An authenticated Path Traversal vulnerability exists in AOS-CX | 6.5 Medium | Sep 1, 2026 |
| CVE-2026-73759 | Vulnerabilities in AOS-CX could allow an unauthenticated remote malicious actor to trigger a denial-of-service condition… | 6.5 Medium | Sep 1, 2026 |
| CVE-2026-73758 | A privilege escalation vulnerability exists in the API endpoint of AOS-CX | 6.5 Medium | Sep 1, 2026 |
Other Hewlett Packard Enterprise (HPE) products
ArubaOS (AOS) 105
Fabric Composer 98
Unknown product 71
Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central 51
EdgeConnect SD-WAN Gateways 38
ClearPass Policy Manager (CPPM) 36
Aruba ClearPass Policy Manager 33
HPE Aruba Networking Wireless Operating System (AOS) 27
EdgeConnect SD-WAN Orchestrator 27
Aruba EdgeConnect Enterprise Software 23
Instant On 20
AOS-8 Instant and AOS-10 AP 18