Known vulnerabilities in Hewlett Packard Enterprise (HPE) AOS-CX
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-73757 | A vulnerability in the web-based management interface of AOS-CX could allow an authenticated remote attacker to… | 6.4 Medium | Sep 1, 2026 |
| CVE-2026-73756 | A vulnerability in an API endpoint of AOS-CX could allow a remote unauthenticated attacker to obtain sensitive… | 5.9 Medium | Sep 1, 2026 |
| CVE-2026-73755 | Privilege Escalation via Unauthorized Access to Sensitive Session Information | 5.7 Medium | Sep 1, 2026 |
| CVE-2026-73754 | Denial-of-service vulnerabilities exist in the command line interface of AOS-CX | 5.3 Medium | Sep 1, 2026 |
| CVE-2026-73753 | Exploitation through affected command-line operations could allow an authenticated low-privileged user to execute… | 8.8 High | Sep 1, 2026 |
| CVE-2026-73752 | An unauthenticated arbitrary file write vulnerability exists in an API endpoint of AOS-CX | 8.8 High | Sep 1, 2026 |
| CVE-2026-73751 | An authenticated user with low-privileged access could submit crafted input through the web-based management interface… | 8.8 High | Sep 1, 2026 |
| CVE-2026-73750 | Vulnerabilities exist in the authentication module that may improperly process malformed or truncated input | 8.8 High | Sep 1, 2026 |
| CVE-2026-73749 | Multiple vulnerabilities exist in a daemon of AOS-CX that may allow for improper processing of malformed input | 9.8 Critical | Sep 1, 2026 |
| CVE-2026-63454 | An authenticated path traversal vulnerability exists in AOS-CX | 7.2 High | Jul 21, 2026 |
| CVE-2026-63453 | Buffer overflow vulnerabilities exist in the command line interface of AOS-CX | 7.2 High | Jul 21, 2026 |
| CVE-2026-44880 | A buffer overflow vulnerability was found in the command line interface of AOS-CX | 8.8 High | Jul 21, 2026 |
| CVE-2026-23817 | A vulnerability in the web-based management interface of AOS-CX Switches could allow an unauthenticated remote… | 6.5 Medium | Mar 11, 2026 |
| CVE-2026-23816 | A vulnerability in the command line interface of AOS-CX Switches could allow an authenticated remote attacker to execute… | 7.2 High | Mar 11, 2026 |
| CVE-2026-23815 | A vulnerability in a custom binary used in AOS-CX Switches' CLI could allow an authenticated remote attacker with high… | 7.2 High | Mar 11, 2026 |
| CVE-2026-23814 | A vulnerability in the command parameters of a certain AOS-CX CLI command could allow a low-privilege authenticated… | 8.8 High | Mar 11, 2026 |
| CVE-2026-23813 | A vulnerability has been identified in the web-based management interface of AOS-CX switches that could potentially… | 9.8 Critical | Mar 11, 2026 |
| CVE-2025-27080 | Vulnerabilities in the command line interface of AOS-CX could allow an authenticated remote attacker to expose sensitive… | 6.0 Medium | Mar 18, 2025 |
| CVE-2025-25042 | A vulnerability in the AOS-CX REST interface could allow an authenticated remote attacker with low privileges to view… | 4.3 Medium | Mar 18, 2025 |
| CVE-2025-25040 | A vulnerability has been identified in the port ACL functionality of AOS-CX software running on the HPE Aruba Networking… | 3.3 Low | Mar 18, 2025 |
| CVE-2024-54010 | A vulnerability in the firewall component of HPE Aruba Networking CX 10000 Series Switches exists | 3.4 Low | Jan 8, 2025 |
Other Hewlett Packard Enterprise (HPE) products
ArubaOS (AOS) 105
Fabric Composer 98
Unknown product 71
Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central 51
EdgeConnect SD-WAN Gateways 38
ClearPass Policy Manager (CPPM) 36
Aruba ClearPass Policy Manager 33
HPE Aruba Networking Wireless Operating System (AOS) 27
EdgeConnect SD-WAN Orchestrator 27
Aruba EdgeConnect Enterprise Software 23
Instant On 20
AOS-8 Instant and AOS-10 AP 18