CVE-2026-73749

CRITICAL9.8Publiée le 1 septembre 2026

Multiple vulnerabilities exist in a daemon of AOS-CX that may allow for improper processing of malformed input. An unauthenticated remote attacker could exploit these vulnerabilities by sending specially crafted packets to the affected service. Successful exploitation could result in remote code execution with elevated privileges.

Score CVSS9.8 / 10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Type de faiblesse (CWE)CWE-284

Articles liés

ArubaOS-CX, falla critica espone gli switch HPE all’esecuzione remota di codice

Vulnérabilités

ArubaOS-CX : une faille critique expose les commutateurs HPE à l’exécution de code à distance

HPE corrige CVE-2026-73749 (CVSS 9,8) : RCE sans authentification sur ArubaOS-CX, mise à jour urgente.

3 sept. 20266 min de lectureLire

This product uses the NVD API but is not endorsed or certified by the NVD.

Base de données CVE