Read the docs
TI-2026-51814 Aliases CVE-2026-73749GHSA-q898-2qwx-466h

Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-CX

Priority MEDIUM 50CWE-284Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-284.

Summary

Multiple vulnerabilities exist in a daemon of AOS-CX that may allow for improper processing of malformed input. An unauthenticated remote attacker could exploit these vulnerabilities by sending specially crafted packets to the affected service. Successful exploitation could result in remote code execution with elevated privileges.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00816 57th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
Hewlett Packard Enterprise (HPE)AOS-CX10.18.0000 – 10.18.0001; 10.17.0000 – 10.17.1021; 10.16.0000 – 10.16.1051; 10.13.0000 – 10.13.1180; 10.10.0000 – 10.10.1180—No fix listedCNA
  • AOS-CX VendorHewlett Packard Enterprise (HPE) Affected 10.18.0000 – 10.18.0001; 10.17.0000 – 10.17.1021; 10.16.0000 – 10.16.1051; 10.13.0000 – 10.13.1180; 10.10.0000 – 10.10.1180 Fixed in — No fix listed CNA

CPE configurations NVD · 157

CPEVersionsRoleVendor
cpe:2.3:o:hpe:arubaos-cx:*:*:*:*:*:*:*:*before 10.10.1181; 10.13.0000 to before 10.13.1190; 10.16.0000 to before 10.16.1060; 10.17.0000 to before 10.17.1030VulnerableHewlett Packard Enterprise (HPE)
cpe:2.3:o:hpe:arubaos-cx:10.18.0001:*:*:*:*:*:*:*10.18.0001VulnerableHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_10000-48y6c_\(r8p13a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_10000-48y6c_\(r8p14a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_10000-48y6c_\(s0f98a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_10040_\(s4r58a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_10040_32p_\(s4r54a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_10040_32p_\(s4r55a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_10040_32p_\(s4r56a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_4100i_12-port_\(jl817a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
Show 147 more CPE
CPEVersionsRoleVendor
cpe:2.3:h:hpe:aruba_cx_4100i_24-port_\(jl818a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6000_12g_\(r8n89a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6000_12p_\(r8n89b\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6000_12p_\(s4r21a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6000_24g_\(r8n87a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6000_24g_\(r8n88a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6000_24p_\(r8n87b\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6000_24p_\(r8n88b\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6000_24p_\(s4r26a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6000_24p_\(s4r27a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6000_48g_\(r8n85a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6000_48g_\(r8n86a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6000_48g_\(r9y03a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6000_48p_\(r8n85b\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6000_48p_\(r8n86b\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6000_48p_\(r9y03b\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6000_48p_\(s4r20a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6000_48p_\(s4r24a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6000_48p_\(s4r25a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6000_8p_\(s4r22a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6000_8p_\(s4r23a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6000_8p_\(s4r28a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6000_8p_\(s4r29a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6100_12g_\(jl679a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6100_24g_\(jl677a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6100_24g_\(jl678a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6100_48g_\(jl675a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6100_48g_\(jl676a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6100_48g_\(r9y04a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6200f_12g_\(r8q72a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6200f_12g_\(r8v13a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6200f_24g_\(jl724b\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6200f_24g_\(jl725b\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6200f_24g_\(s0g13a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6200f_24g_\(s0g14a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6200f_24g_\(s0m81a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6200f_24g_\(s0m82a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6200f_24g_\(s0m86a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6200f_24g_\(s0m87a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6200f_48g_\(jl726b\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6200f_48g_\(jl727b\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6200f_48g_\(jl728b\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6200f_48g_\(s0g15a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6200f_48g_\(s0g16a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6200f_48g_\(s0g17a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6200f_48g_\(s0m83a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6200f_48g_\(s0m84a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6200f_48g_\(s0m85a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6200f_48g_\(s0m88a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6200f_48g_\(s0m89a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6200f_48g_\(s0m90a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6200m_24g_\(r8q67a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6200m_24g_\(r8q68a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6200m_24g_\(r8v08a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6200m_24g_\(r8v09a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6200m_36g_\(r8q71a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6200m_36g_\(r8v12a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6200m_48g_\(r8q69a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6200m_48g_\(r8q70a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6200m_48g_\(r8v10a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6200m_48g_\(r8v11a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300f_24_\(jl666a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300f_24_\(jl668a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300f_24p_\(s0g96a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300f_24p_\(s0g98a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300f_48_\(jl665a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300f_48_\(jl667a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300f_48p_\(s0g95a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300f_48p_\(s0g97a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300m_16p_\(s4p41a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300m_16p_\(s4p45a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300m_24_\(jl658a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300m_24_\(jl660a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300m_24_\(jl662a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300m_24_\(jl664a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300m_24p_\(r8s89a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300m_24p_\(r8s92a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300m_24p_\(s0f99a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300m_24p_\(s0g01a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300m_24p_\(s0g03a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300m_24p_\(s0g05a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300m_24p_\(s4p44a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300m_24p_\(s4p48a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300m_24p_\(s5z46a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300m_32p_\(s4p42a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300m_32p_\(s4p46a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300m_48_\(jl659a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300m_48_\(jl661a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300m_48_\(jl663a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300m_48_\(jl762a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300m_48p_\(r8s90a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300m_48p_\(s0g00a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300m_48p_\(s0g02a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300m_48p_\(s0g04a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300m_48p_\(s0g06a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300m_48p_\(s0x44a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300m_48p_\(s4p43a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300m_48p_\(s4p47a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6300m_48sr5_\(r8s91a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6405_\(r0x26a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6405_48sfp\+8sfp56_\(r0x30a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6405_96g_\(r0x29a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6405_v2_\(r0x26c\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6410_\(r0x27a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6410_96g_\(jl741a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_6410_v2_\(r0x27c\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_8320_32_\(jl579a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_8320_48_\(jl479a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_8320_48_\(jl581a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_8325-32c_\(jl626a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_8325-32c_\(jl627a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_8325-48y8c_\(jl624a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_8325-48y8c_\(jl625a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_8325-48y8c_\(jl858a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_8325h-16c_\(s4b22a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_8325h-16c_\(s4b24a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_8325h-18y4c_\(s4b21a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_8325h-18y4c_\(s4b23a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_8325p-32c_\(s0g07a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_8325p-32c_\(s0g08a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_8360-12c_\(jl708c\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_8360-12c_\(jl709c\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_8360-16y2c_\(jl702c\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_8360-16y2c_\(jl703c\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_8360-24xf2c_\(jl710c\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_8360-24xf2c_\(jl711c\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_8360-32y4c_\(jl700c\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_8360-32y4c_\(jl701c\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_8360-48xt4c_\(jl706c\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_8360-48xt4c_\(jl707c\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_8360-48y6c_\(jl704c\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_8360-48y6c_\(jl705c\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_8400_\(jl376a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_8400_8-slot_chassis_\(jl375a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_9300_\(r8z97a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_9300_\(r8z98a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_9300_\(r8z99a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_9300_\(r9a00a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_9300_32d_\(r8z96a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_9300_32d_\(r9a29a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_9300_32d_\(r9a30a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_9300s_32p_\(s0f81a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_9300s_32p_\(s0f82a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_9300s_32p_\(s0f83a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_9300s_32p_\(s0f84a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_9300s_32p_\(s0f87a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)
cpe:2.3:h:hpe:aruba_cx_9300s_32p_\(s0f88a\):-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise (HPE)

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-73749
  2. 2026-10-03 Alias added: GHSA-q898-2qwx-466h

References

  • TI-2002-02356 The Diffie-Hellman Key Agreement Protocol allows remote attackers (from the client side)… CVSS 3.1HIGH 7.5
  • TI-2026-19179 Authentication Bypass in Web Interface allows Unauthenticated Admin Password Reset CVSS 3.1CRITICAL 9.8
  • TI-2026-51843 Credential Manager Vulnerability Allows Unauthorized Administrative Access CVSS 3.1CRITICAL 9.8
  • TI-2026-19182 Authenticated Command Injection found in admin AOS-CX CLI command CVSS 3.1HIGH 8.8
  • TI-2023-03473 Authenticated Command Injection Vulnerability in AOS-CX Command Line Interface CVSS 3.1HIGH 8.8
  • TI-2021-17871 Command injection in Aruba CX 6200F Switch Series, Aruba 6300 Switch Series, Aruba 6400… CVSS 3.1HIGH 8.8
See all 56 →

Sources