CVE-2026-73758 Authenticated Privilege Escalation Vulnerability via Broken Access Control in AOS-CX

A privilege escalation vulnerability exists in the API endpoint of AOS-CX. Successful exploitation could allow an authenticated low privilege operator user to change the state of certain settings of a vulnerable system...

CVE-2026-73758

CVE-2026-73758 is an authenticated privilege escalation vulnerability in the API endpoint of HPE AOS-CX (Aruba OS for switching), caused by broken access control . A low-privilege operator user with valid credentials can change the state of certain system settings, rated CVSS 6.5 (Medium) with a ...

EUVD-2026-69622

A privilege escalation vulnerability exists in the API endpoint of AOS-CX. Successful exploitation could allow an authenticated low privilege operator user to change the state of certain settings of a vulnerable system...

CVE-2026-73757

CVE-2026-73757 is an authenticated SSRF vulnerability in the web-based management interface of HPE AOS-CX . A remote attacker with valid credentials can forge server-side requests to enumerate the internal structure of the host, resulting in potential disclosure and limited modification of sensit...

EUVD-2026-69621

A vulnerability in the web-based management interface of AOS-CX could allow an authenticated remote attacker to conduct a server-side request forgery SSRF attack. A successful exploit allows an attacker to enumerate information about the internal structure of the AOS-CX host, leading to potential...

CVE-2026-73757 Authenticated Server-Side Request Forgery (SSRF) Leading to Information Disclosure in AOS-CX

A vulnerability in the web-based management interface of AOS-CX could allow an authenticated remote attacker to conduct a server-side request forgery SSRF attack. A successful exploit allows an attacker to enumerate information about the internal structure of the AOS-CX host, leading to potential...

CVE-2026-73756 Unauthenticated Sensitive Information Disclosure via Man-in-the-Middle in AOS-CX via API Endpoint

A vulnerability in an API endpoint of AOS-CX could allow a remote unauthenticated attacker to obtain sensitive information via a man-in-the-middle attack. Successful exploitation allows an attacker to retrieve data which could be used to further compromise the confidentiality of the affected syst...

CVE-2026-73756

CVE-2026-73756 affects an API endpoint in AOS-CX , allowing a remote unauthenticated attacker to obtain sensitive information through a man-in-the-middle (MITM) attack . The retrieved data could be leveraged to further compromise the confidentiality of the affected system. The CVSS 3.1 score is 5...

EUVD-2026-69620

A vulnerability in an API endpoint of AOS-CX could allow a remote unauthenticated attacker to obtain sensitive information via a man-in-the-middle attack. Successful exploitation allows an attacker to retrieve data which could be used to further compromise the confidentiality of the affected syst...

CVE-2026-73755 Privilege Escalation via Unauthorized Access to Sensitive Session Information

A privilege escalation vulnerability exists in the API endpoint of AOS-CX. Successful exploitation could allow an authenticated low-privilege operator user, after a required user action, to access sensitive information from the vulnerable system...

CVE-2026-73755

CVE-2026-73755 is a privilege escalation vulnerability in the API endpoint of AOS-CX (HPE). An authenticated low-privilege operator user , after a required user interaction, can access sensitive session information from the system. The CVSS 3.1 score is 5.7 (MEDIUM) with the vector AV:N/AC:L/PR:L...

EUVD-2026-69619

A privilege escalation vulnerability exists in the API endpoint of AOS-CX. Successful exploitation could allow an authenticated low-privilege operator user, after a required user action, to access sensitive information from the vulnerable system...

EUVD-2026-69618

Denial-of-service vulnerabilities exist in the command line interface of AOS-CX. Successful exploitation could allow an authenticated user to disrupt the normal operation of a vulnerable system...

CVE-2026-73754 Authenticated Denial-of-Service Vulnerabilities in the Command Line Interface of AOS-CX

Denial-of-service vulnerabilities exist in the command line interface of AOS-CX. Successful exploitation could allow an authenticated user to disrupt the normal operation of a vulnerable system...

CVE-2026-73754

CVE-2026-73754 affects the command line interface of HPE AOS-CX (ArubaOS CX). The vulnerability allows an authenticated user with low privileges to trigger a denial-of-service , disrupting normal system operation. The CVSS 3.1 score is 5.3 (Medium) , reflecting a network attack vector with high c...

CVE-2026-73753

CVE-2026-73753 is an authenticated remote command injection vulnerability in the HPE ArubaOS-CX (AOS-CX) Command Line Interface . Through affected command-line operations, an authenticated low-privileged user can execute arbitrary commands with privileged user permissions on the underlying operat...

CVE-2026-73753 Authenticated Remote Command Injection Vulnerabilities in AOS-CX Command Line Interface

Exploitation through affected command-line operations could allow an authenticated low-privileged user to execute arbitrary commands as a privileged user on the underlying operating system...

CVE-2026-73752 Unauthenticated Arbitrary File Write Vulnerability Leads to Remote Code Execution in AOS-CX

An unauthenticated arbitrary file write vulnerability exists in an API endpoint of AOS-CX. Successful exploitation of this vulnerability allows an attacker to write arbitrary files to the underlying operating system, which could lead to remote code execution...

CVE-2026-73752

An unauthenticated arbitrary file write vulnerability exists in an API endpoint of AOS-CX (HPE). Successful exploitation allows an attacker to write arbitrary files to the underlying operating system, potentially leading to remote code execution . The CVSS 3.1 base score is 8.8 (HIGH) , with an a...

EUVD-2026-69616

An unauthenticated arbitrary file write vulnerability exists in an API endpoint of AOS-CX. Successful exploitation of this vulnerability allows an attacker to write arbitrary files to the underlying operating system, which could lead to remote code execution...