AOS-CX CVE-2026-73749

Analysis complete. Key findings for CVE-2026-73778: - **Vulnerability class**: Predictable factory-default password in

Privilege escalation to arbitrary code execution in HPE Aruba Networking AOS-CX switches allows a remote low-privileged,

Remote code execution and denial-of-service vulnerabilities in HPE AOS-CX's authentication module arise from improper ha

Privilege escalation in HPE AOS-CX allows an authenticated low-privileged user to execute arbitrary commands with the pr

OS command injection in HPE AOS-CX's web-based management interface allows any authenticated low-privileged user to exec

Format string exploitation in the HPE AOS-CX command line interface enables unauthenticated, adjacent-network attackers

Unauthenticated arbitrary file write in HPE AOS-CX exposes network switches to full device compromise from adjacent netw

Unauthenticated command injection (CWE-77) in an HPE AOS-CX management component allows an adjacent-network attacker to

A vulnerability in the web-based management interface of AOS-CX could allow a remote authenticated user with read-only p

AOS-CX lacks Anti-CSRF protections in place for state-changing operations. Rated high severity (CVSS 8.8), this vulnerab

AOS-CX lacks Anti-CSRF protections in place for state-changing operations. Rated high severity (CVSS 8.8), this vulnerab

Stored cross-site scripting in the HPE AOS-CX web-based management interface allows an authenticated attacker with high