EUVD-2026-69628

Vulnerabilities have been identified in the operating system of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. In some cases this could enable unauthorized modification of affected resources and limited disruption of...

CVE-2026-73764 Authentication Bypass Vulnerabilities Leading to Unauthorized Modification and Service Disruption in AOS-CX

Vulnerabilities have been identified in the operating system of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. In some cases this could enable unauthorized modification of affected resources and limited disruption of...

CVE-2026-73764

CVE-2026-73764 affects the operating system of HPE AOS-CX switches , where an unauthenticated actor from an adjacent network can bypass authentication controls, enabling unauthorized modification of resources and limited service disruption . The CVSS 3.1 score is 7.1 (HIGH) with an attack vector ...

CVE-2026-73762

CVE-2026-73762 affects the API endpoint of HPE ArubaOS-CX (AOS-CX) , where a remote actor with high privileges can circumvent configured access controls, potentially gaining unauthorized access to management functionality that should be restricted. The vulnerability is rated CVSS 3.1 6.6 (MEDIUM)...

EUVD-2026-69626

A vulnerability has been identified in the API endpoint of AOS-CX that could allow a remote actor to circumvent existing access controls. In some cases this could enable unauthorized access to management functionality that should be restricted by the configured access control policy...

CVE-2026-73762 Authorization Bypass in the API Endpoint of AOS-CX Leads to Unauthorized Access

A vulnerability has been identified in the API endpoint of AOS-CX that could allow a remote actor to circumvent existing access controls. In some cases this could enable unauthorized access to management functionality that should be restricted by the configured access control policy...

CVE-2026-73761

CVE-2026-73761 is an out-of-bounds read vulnerability in the underlying operating system of HPE AOS-CX (ArubaOS CX). By sending a specially crafted packet from the adjacent network , an unauthenticated attacker can trigger the read and disclose sensitive information from the OS. The CVSS 3.1 base...

CVE-2026-73761 Unauthenticated Out-of-Bounds Read Vulnerability leads to Information Disclosure in AOS-CX

An out-of-bounds read vulnerability exists in the underlying operating system of AOS-CX that could lead to unauthenticated information disclosure by sending a specially crafted packet. Successful exploitation of this vulnerability results in the ability to disclose sensitive information from the...

EUVD-2026-69625

An out-of-bounds read vulnerability exists in the underlying operating system of AOS-CX that could lead to unauthenticated information disclosure by sending a specially crafted packet. Successful exploitation of this vulnerability results in the ability to disclose sensitive information from the...

CVE-2026-73760 Authenticated Path Traversal Vulnerability Leads to Remote Unauthorized Access to Files in AOS-CX

An authenticated Path Traversal vulnerability exists in AOS-CX. Successful exploitation of this vulnerability allows an attacker to read arbitrary files from the web-based management interface of the underlying operating system, which could lead to remote unauthorized access to files...

EUVD-2026-69624

An authenticated Path Traversal vulnerability exists in AOS-CX. Successful exploitation of this vulnerability allows an attacker to read arbitrary files from the web-based management interface of the underlying operating system, which could lead to remote unauthorized access to files...

CVE-2026-73760

An authenticated Path Traversal vulnerability in HPE AOS-CX allows an attacker with low privileges to read arbitrary files from the web-based management interface of the underlying operating system, potentially leading to remote unauthorized access to files. The CVSS 3.1 score is 6.5 (Medium) wit...

CVE-2026-73759

AOS-CX (HPE) contains vulnerabilities that allow an unauthenticated attacker on the adjacent network to trigger a denial-of-service condition by sending specially crafted packets , resulting in disruption of normal device operation. The CVSS v3.1 score is 6.5 (Medium) , reflecting low attack comp...

EUVD-2026-69623

Vulnerabilities in AOS-CX could allow an unauthenticated remote malicious actor to trigger a denial-of-service condition by sending specially crafted packets. Successful exploitation of these vulnerabilities results in disruption of normal operation on affected devices...

CVE-2026-73759 Unauthenticated Denial-of-Service Vulnerabilities in AOS-CX

Vulnerabilities in AOS-CX could allow an unauthenticated remote malicious actor to trigger a denial-of-service condition by sending specially crafted packets. Successful exploitation of these vulnerabilities results in disruption of normal operation on affected devices...

CVE-2026-73758 Authenticated Privilege Escalation Vulnerability via Broken Access Control in AOS-CX

A privilege escalation vulnerability exists in the API endpoint of AOS-CX. Successful exploitation could allow an authenticated low privilege operator user to change the state of certain settings of a vulnerable system...

CVE-2026-73758

CVE-2026-73758 is an authenticated privilege escalation vulnerability in the API endpoint of HPE AOS-CX (Aruba OS for switching), caused by broken access control . A low-privilege operator user with valid credentials can change the state of certain system settings, rated CVSS 6.5 (Medium) with a ...

EUVD-2026-69622

A privilege escalation vulnerability exists in the API endpoint of AOS-CX. Successful exploitation could allow an authenticated low privilege operator user to change the state of certain settings of a vulnerable system...

EUVD-2026-69621

A vulnerability in the web-based management interface of AOS-CX could allow an authenticated remote attacker to conduct a server-side request forgery SSRF attack. A successful exploit allows an attacker to enumerate information about the internal structure of the AOS-CX host, leading to potential...

CVE-2026-73757

CVE-2026-73757 is an authenticated SSRF vulnerability in the web-based management interface of HPE AOS-CX . A remote attacker with valid credentials can forge server-side requests to enumerate the internal structure of the host, resulting in potential disclosure and limited modification of sensit...