CVE-2026-73781

HIGH8.4Publiée le 1 septembre 2026

A vulnerability in the web-based management interface of AOS-CX could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against an administrative user of the interface. A successful exploit allows an attacker to execute arbitrary script code in a victim's browser in the context of the affected interface.

Score CVSS8.4 / 10CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H

Type de faiblesse (CWE)CWE-79

Articles liés

ArubaOS-CX, falla critica espone gli switch HPE all’esecuzione remota di codice

Vulnérabilités

ArubaOS-CX : une faille critique expose les commutateurs HPE à l’exécution de code à distance

HPE corrige CVE-2026-73749 (CVSS 9,8) : RCE sans authentification sur ArubaOS-CX, mise à jour urgente.

3 sept. 20266 min de lectureLire

This product uses the NVD API but is not endorsed or certified by the NVD.

Base de données CVE