CVE-2026-73751

HIGH8.8Published on September 1, 2026

An authenticated user with low-privileged access could submit crafted input through the web-based management interface to execute arbitrary commands on the underlying operating system.

CVSS score8.8 / 10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness type (CWE)CWE-77

ArubaOS-CX, falla critica espone gli switch HPE all’esecuzione remota di codice

Vulnerabilities

ArubaOS-CX Critical Vulnerability Exposes HPE Switches to Remote Code Execution

HPE fixed CVE-2026-73749, a critical 9.8 unauthenticated RCE flaw in ArubaOS-CX switches, plus 23 other vulnerabilities. Update affected versions now.

Sep 3, 20265 min readRead

This product uses the NVD API but is not endorsed or certified by the NVD.

CVE database

Related articles

ArubaOS-CX Critical Vulnerability Exposes HPE Switches to Remote Code Execution