CVE-2026-73777

HIGH8.1Published on September 1, 2026

Vulnerabilities have been identified in the API endpoint of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls.

CVSS score8.1 / 10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness type (CWE)CWE-287

ArubaOS-CX, falla critica espone gli switch HPE all’esecuzione remota di codice

Vulnerabilities

ArubaOS-CX Critical Vulnerability Exposes HPE Switches to Remote Code Execution

HPE fixed CVE-2026-73749, a critical 9.8 unauthenticated RCE flaw in ArubaOS-CX switches, plus 23 other vulnerabilities. Update affected versions now.

Sep 3, 20265 min readRead

This product uses the NVD API but is not endorsed or certified by the NVD.

CVE database

Related articles

ArubaOS-CX Critical Vulnerability Exposes HPE Switches to Remote Code Execution