CVE-2026-73755

EUVD-2026-69619
A privilege escalation vulnerability exists in the API endpoint of AOS-CX. Successful exploitation could allow an authenticated low-privilege operator user, after a required user action, to access sensitive information from the vulnerable system.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.7 MEDIUM
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 21.87%
Affected Products (NVD)
VendorProductVersion
hpearubaos-cx
𝑥
≤ 10.10.1180
hpearubaos-cx
10.13.0000 ≤
𝑥
≤ 10.13.1180
hpearubaos-cx
10.16.0000 ≤
𝑥
≤ 10.16.1051
hpearubaos-cx
10.17.0000 ≤
𝑥
≤ 10.17.1021
hpearubaos-cx
10.18.0001
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05134en_us&docLocale=en_US