CVE-2026-73764: fallo de gravedad alta en Hewlett Packard Enterprise (HPE) AOS-CX
Authentication Bypass Vulnerabilities Leading to Unauthorized Modification and Service Disruption in AOS-CX
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
21Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 7.1epss 0.3%
Vulnerabilities have been identified in the operating system of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. In some cases this could enable unauthorized modification of affected resources and limited disruption of affected services.
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L
Productos afectados
Hewlett Packard Enterprise (HPE) · AOS-CXCVEs relacionadas — Hewlett Packard Enterprise (HPE) AOS-CX
En el mismo producto, de las más peligrosas a las menos.
CVE-2026-73767HIGHAuthenticated Remote Command Injection Vulnerabilities in AOS-CX Command Line InterfaceEPSS 1.7%CVE-2026-73766HIGHAuthenticated Command Injection Vulnerabilities in the API Endpoint of AOS-CXEPSS 1.5%CVE-2026-23816HIGHAuthenticated Command Injection found in admin AOS-CX CLI commandEPSS 1.3%CVE-2026-23815HIGHAuthenticated Command Injection found in AOS-CX Administrative CLI CommandEPSS 1.0%CVE-2026-23813CRITICALAuthentication Bypass in Web Interface allows Unauthenticated Admin Password ResetEPSS 0.9%CVE-2026-73765HIGHAuthenticated Path Traversal Vulnerabilities Lead to Remote Code Execution in AOS-CXEPSS 0.9%