CVE-2026-73749

EUVD-2026-69613
Multiple vulnerabilities exist in a daemon of AOS-CX that may allow for improper processing of malformed input. An unauthenticated remote attacker could exploit these vulnerabilities by sending specially crafted packets to the affected service. Successful exploitation could result in remote code execution with elevated privileges.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 56.22%
Affected Products (NVD)
VendorProductVersion
hpearubaos-cx
𝑥
< 10.10.1181
hpearubaos-cx
10.13.0000 ≤
𝑥
< 10.13.1190
hpearubaos-cx
10.16.0000 ≤
𝑥
< 10.16.1060
hpearubaos-cx
10.17.0000 ≤
𝑥
< 10.17.1030
hpearubaos-cx
10.18.0001
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05134en_us&docLocale=en_US