CVEvulnerability
CVE-2026-73763
8.8 HIGH
Official page ↗
- Status
- Analyzed
- Published
- 2026-09-01
- Last modified
- 2026-09-10
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.1 HIGH — CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L
- CVSS 3.1 ([email protected])
- 8.8 HIGH — CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-77
Description
A vulnerability exists in a management component that could allow an unauthenticated adjacent attacker to execute arbitrary commands. Successful exploitation could result in remote execution of arbitrary commands in the context of the affected utility.
Affected configurations
• hpe arubaos-cx (<= 10.10.1180)
• hpe arubaos-cx (>= 10.13.0000 <= 10.13.1180)
• hpe arubaos-cx (>= 10.16.0000 <= 10.16.1051)
• hpe arubaos-cx (>= 10.17.0000 <= 10.17.1021)
• hpe arubaos-cx 10.18.0001
Related
Weakness · CWE (1)
- CWE-77 Improper Neutralization of Special Elements used in a Command weakness
References
- https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05134en_us&docLocale=en_US Patch, Vendor Advisory