CVE-2026-73764

Summary

Vulnerabilities have been identified in the operating system of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. In some cases this could enable unauthorized modification of affected resources and limited disruption of affected services.

Affected Software

VendorProductVersion RangeStatus
Hewlett Packard Enterprise (HPE)AOS-CX10.18.0000 <= 10.18.0001affected
Hewlett Packard Enterprise (HPE)AOS-CX10.17.0000 <= 10.17.1021affected
Hewlett Packard Enterprise (HPE)AOS-CX10.16.0000 <= 10.16.1051affected
Hewlett Packard Enterprise (HPE)AOS-CX10.13.0000 <= 10.13.1180affected
Hewlett Packard Enterprise (HPE)AOS-CX10.10.0000 <= 10.10.1180affected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References