CVE-2026-73780

A CSRF protection gap in the web-based management interface of HPE AOS-CX switches affects certificate-authenticated sessions , allowing a remote unauthenticated attacker to execute arbitrary input against the interface by convincing an authenticated user to interact with a specially crafted URL....