Authentication Module Vulnerability in HPE Products
CVE-2026-73750

8.8HIGH

Key Information:

Vendor

HP (HP)

Status
Aos-cx
Vendor
CVE Published:
1 September 2026

What is CVE-2026-73750?

The authentication module in HPE products contains vulnerabilities that allow for the improper processing of malformed or truncated input. An authenticated remote attacker could exploit these flaws by sending specially crafted input from a compromised authentication server. This exploitation may lead to a Denial-of-Service condition or, in some situations, could enable remote code execution with elevated privileges, posing significant security risks.

Affected Version(s)

AOS-CX 10.18.0000 <= 10.18.0001

AOS-CX 10.18.0000 <= 10.18.0001

AOS-CX 10.17.0000 <= 10.17.1021

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpe...

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

This vulnerability was discovered by internal security research at HPE Networking.
.