CVE-2026-73777

CVE-2026-73777 affects the API endpoint of HPE AOS-CX switches , where authorization bypass vulnerabilities allow an unauthenticated remote actor to circumvent existing authentication controls, leading to privilege escalation . The CVSS 3.1 score is 8.1 (HIGH) , reflecting network-vectorable atta...

CVE-2026-73775 Authenticated Sensitive Information Disclosure Vulnerabilities in AOS-CX

Vulnerabilities in the API endpoint of AOS-CX could allow a remote attacker authenticated with low privileges to access sensitive information. A successful exploit allows an attacker to retrieve information which could be used to potentially gain further access to network services supported by...

CVE-2026-73775 Authenticated Sensitive Information Disclosure Vulnerabilities in AOS-CX

Vulnerabilities in the API endpoint of AOS-CX could allow a remote attacker authenticated with low privileges to access sensitive information. A successful exploit allows an attacker to retrieve information which could be used to potentially gain further access to network services supported by...

CVE-2026-73775

AOS-CX (HPE) has an authenticated information disclosure vulnerability in its API endpoint . A remote attacker with low-privilege credentials can retrieve sensitive information that may enable further access to network services managed by AOS-CX. The CVSS 3.1 score is 7.7 (HIGH) with a changed sc...

EUVD-2026-69638

Vulnerabilities in the API endpoint of AOS-CX could allow a remote attacker authenticated with low privileges to access sensitive information. A successful exploit allows an attacker to retrieve information which could be used to potentially gain further access to network services supported by...

CVE-2026-73773 Unauthenticated Denial-of-Service (DoS) Vulnerability in AOS-CX

An unauthenticated Denial-of-Service DoS vulnerability exists in the API endpoint of AOS-CX. Successful exploitation of this vulnerability results in the ability to interrupt the normal operation of the affected service...

EUVD-2026-69636

An unauthenticated Denial-of-Service DoS vulnerability exists in the API endpoint of AOS-CX. Successful exploitation of this vulnerability results in the ability to interrupt the normal operation of the affected service...

CVE-2026-73773

AOS-CX by HPE has an unauthenticated Denial-of-Service (DoS) vulnerability in its API endpoint . A remote attacker with network access and no privileges can exploit this to interrupt the normal operation of the affected service. The CVSS 3.1 base score is 7.5 (HIGH) , reflecting network attack ve...

CVE-2026-73773 Unauthenticated Denial-of-Service (DoS) Vulnerability in AOS-CX

An unauthenticated Denial-of-Service DoS vulnerability exists in the API endpoint of AOS-CX. Successful exploitation of this vulnerability results in the ability to interrupt the normal operation of the affected service...

CVE-2026-73766 Authenticated Command Injection Vulnerabilities in the API Endpoint of AOS-CX

Command injection vulnerabilities in the API endpoint of AOS-CX could allow an authenticated remote attacker with administrative privileges to inject arbitrary commands. Successful exploitation could allow an attacker to execute arbitrary commands as a privileged user on the underlying operating...

EUVD-2026-69630

Command injection vulnerabilities in the API endpoint of AOS-CX could allow an authenticated remote attacker with administrative privileges to inject arbitrary commands. Successful exploitation could allow an attacker to execute arbitrary commands as a privileged user on the underlying operating...

CVE-2026-73766 Authenticated Command Injection Vulnerabilities in the API Endpoint of AOS-CX

Command injection vulnerabilities in the API endpoint of AOS-CX could allow an authenticated remote attacker with administrative privileges to inject arbitrary commands. Successful exploitation could allow an attacker to execute arbitrary commands as a privileged user on the underlying operating...

CVE-2026-73766

CVE-2026-73766 is a command injection vulnerability in the API endpoint of HPE AOS-CX . An authenticated remote attacker with administrative privileges can inject arbitrary commands, potentially executing them as a privileged user on the underlying operating system. The HPE-assigned CVSS 3.1 scor...

CVE-2026-73765 Authenticated Path Traversal Vulnerabilities Lead to Remote Code Execution in AOS-CX

Authenticated path traversal vulnerabilities exist in API endpoints of AOS-CX. Successful exploitation of these vulnerabilities allows an attacker to write arbitrary files to the underlying operating system, which could lead to remote code execution...

CVE-2026-73765 Authenticated Path Traversal Vulnerabilities Lead to Remote Code Execution in AOS-CX

Authenticated path traversal vulnerabilities exist in API endpoints of AOS-CX. Successful exploitation of these vulnerabilities allows an attacker to write arbitrary files to the underlying operating system, which could lead to remote code execution...

EUVD-2026-69626

A vulnerability has been identified in the API endpoint of AOS-CX that could allow a remote actor to circumvent existing access controls. In some cases this could enable unauthorized access to management functionality that should be restricted by the configured access control policy...

CVE-2026-73762 Authorization Bypass in the API Endpoint of AOS-CX Leads to Unauthorized Access

A vulnerability has been identified in the API endpoint of AOS-CX that could allow a remote actor to circumvent existing access controls. In some cases this could enable unauthorized access to management functionality that should be restricted by the configured access control policy...

CVE-2026-73762

CVE-2026-73762 affects the API endpoint of HPE ArubaOS-CX (AOS-CX) , where a remote actor with high privileges can circumvent configured access controls, potentially gaining unauthorized access to management functionality that should be restricted. The vulnerability is rated CVSS 3.1 6.6 (MEDIUM)...

CVE-2026-73762 Authorization Bypass in the API Endpoint of AOS-CX Leads to Unauthorized Access

A vulnerability has been identified in the API endpoint of AOS-CX that could allow a remote actor to circumvent existing access controls. In some cases this could enable unauthorized access to management functionality that should be restricted by the configured access control policy...

EUVD-2026-69622

A privilege escalation vulnerability exists in the API endpoint of AOS-CX. Successful exploitation could allow an authenticated low privilege operator user to change the state of certain settings of a vulnerable system...