CVE-2026-73782

HIGH8.8Publiée le 1 septembre 2026

A format string vulnerability exists in the command line interface of AOS-CX that could lead to unauthenticated remote code execution. Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system.

Score CVSS8.8 / 10CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Type de faiblesse (CWE)CWE-134

Articles liés

ArubaOS-CX, falla critica espone gli switch HPE all’esecuzione remota di codice

Vulnérabilités

ArubaOS-CX : une faille critique expose les commutateurs HPE à l’exécution de code à distance

HPE corrige CVE-2026-73749 (CVSS 9,8) : RCE sans authentification sur ArubaOS-CX, mise à jour urgente.

3 sept. 20266 min de lectureLire

This product uses the NVD API but is not endorsed or certified by the NVD.

Base de données CVE