CVE-2026-73762

CVE-2026-73762 affects the API endpoint of HPE ArubaOS-CX (AOS-CX) , where a remote actor with high privileges can circumvent configured access controls, potentially gaining unauthorized access to management functionality that should be restricted. The vulnerability is rated CVSS 3.1 6.6 (MEDIUM)...

CVE-2026-73761 Unauthenticated Out-of-Bounds Read Vulnerability leads to Information Disclosure in AOS-CX

An out-of-bounds read vulnerability exists in the underlying operating system of AOS-CX that could lead to unauthenticated information disclosure by sending a specially crafted packet. Successful exploitation of this vulnerability results in the ability to disclose sensitive information from the...

CVE-2026-73761

CVE-2026-73761 is an out-of-bounds read vulnerability in the underlying operating system of HPE AOS-CX (ArubaOS CX). By sending a specially crafted packet from the adjacent network , an unauthenticated attacker can trigger the read and disclose sensitive information from the OS. The CVSS 3.1 base...

EUVD-2026-69625

An out-of-bounds read vulnerability exists in the underlying operating system of AOS-CX that could lead to unauthenticated information disclosure by sending a specially crafted packet. Successful exploitation of this vulnerability results in the ability to disclose sensitive information from the...

CVE-2026-73761 Unauthenticated Out-of-Bounds Read Vulnerability leads to Information Disclosure in AOS-CX

An out-of-bounds read vulnerability exists in the underlying operating system of AOS-CX that could lead to unauthenticated information disclosure by sending a specially crafted packet. Successful exploitation of this vulnerability results in the ability to disclose sensitive information from the...

EUVD-2026-69624

An authenticated Path Traversal vulnerability exists in AOS-CX. Successful exploitation of this vulnerability allows an attacker to read arbitrary files from the web-based management interface of the underlying operating system, which could lead to remote unauthorized access to files...

CVE-2026-73760 Authenticated Path Traversal Vulnerability Leads to Remote Unauthorized Access to Files in AOS-CX

An authenticated Path Traversal vulnerability exists in AOS-CX. Successful exploitation of this vulnerability allows an attacker to read arbitrary files from the web-based management interface of the underlying operating system, which could lead to remote unauthorized access to files...

CVE-2026-73760 Authenticated Path Traversal Vulnerability Leads to Remote Unauthorized Access to Files in AOS-CX

An authenticated Path Traversal vulnerability exists in AOS-CX. Successful exploitation of this vulnerability allows an attacker to read arbitrary files from the web-based management interface of the underlying operating system, which could lead to remote unauthorized access to files...

CVE-2026-73760

An authenticated Path Traversal vulnerability in HPE AOS-CX allows an attacker with low privileges to read arbitrary files from the web-based management interface of the underlying operating system, potentially leading to remote unauthorized access to files. The CVSS 3.1 score is 6.5 (Medium) wit...

CVE-2026-73759 Unauthenticated Denial-of-Service Vulnerabilities in AOS-CX

Vulnerabilities in AOS-CX could allow an unauthenticated remote malicious actor to trigger a denial-of-service condition by sending specially crafted packets. Successful exploitation of these vulnerabilities results in disruption of normal operation on affected devices...

CVE-2026-73759

AOS-CX (HPE) contains vulnerabilities that allow an unauthenticated attacker on the adjacent network to trigger a denial-of-service condition by sending specially crafted packets , resulting in disruption of normal device operation. The CVSS v3.1 score is 6.5 (Medium) , reflecting low attack comp...

EUVD-2026-69623

Vulnerabilities in AOS-CX could allow an unauthenticated remote malicious actor to trigger a denial-of-service condition by sending specially crafted packets. Successful exploitation of these vulnerabilities results in disruption of normal operation on affected devices...

CVE-2026-73759 Unauthenticated Denial-of-Service Vulnerabilities in AOS-CX

Vulnerabilities in AOS-CX could allow an unauthenticated remote malicious actor to trigger a denial-of-service condition by sending specially crafted packets. Successful exploitation of these vulnerabilities results in disruption of normal operation on affected devices...

CVE-2026-73758 Authenticated Privilege Escalation Vulnerability via Broken Access Control in AOS-CX

A privilege escalation vulnerability exists in the API endpoint of AOS-CX. Successful exploitation could allow an authenticated low privilege operator user to change the state of certain settings of a vulnerable system...

EUVD-2026-69622

A privilege escalation vulnerability exists in the API endpoint of AOS-CX. Successful exploitation could allow an authenticated low privilege operator user to change the state of certain settings of a vulnerable system...

CVE-2026-73758 Authenticated Privilege Escalation Vulnerability via Broken Access Control in AOS-CX

A privilege escalation vulnerability exists in the API endpoint of AOS-CX. Successful exploitation could allow an authenticated low privilege operator user to change the state of certain settings of a vulnerable system...

CVE-2026-73758

CVE-2026-73758 is an authenticated privilege escalation vulnerability in the API endpoint of HPE AOS-CX (Aruba OS for switching), caused by broken access control . A low-privilege operator user with valid credentials can change the state of certain system settings, rated CVSS 6.5 (Medium) with a ...

CVE-2026-73757 Authenticated Server-Side Request Forgery (SSRF) Leading to Information Disclosure in AOS-CX

A vulnerability in the web-based management interface of AOS-CX could allow an authenticated remote attacker to conduct a server-side request forgery SSRF attack. A successful exploit allows an attacker to enumerate information about the internal structure of the AOS-CX host, leading to potential...

CVE-2026-73757

CVE-2026-73757 is an authenticated SSRF vulnerability in the web-based management interface of HPE AOS-CX . A remote attacker with valid credentials can forge server-side requests to enumerate the internal structure of the host, resulting in potential disclosure and limited modification of sensit...

EUVD-2026-69621

A vulnerability in the web-based management interface of AOS-CX could allow an authenticated remote attacker to conduct a server-side request forgery SSRF attack. A successful exploit allows an attacker to enumerate information about the internal structure of the AOS-CX host, leading to potential...