Privilege Escalation Vulnerability in AOS-CX by HPE
CVE-2026-73758

6.5MEDIUM

Key Information:

Vendor

HP (HP)

Status
Aos-cx
Vendor
CVE Published:
1 September 2026

What is CVE-2026-73758?

A privilege escalation vulnerability has been identified in the API endpoint of AOS-CX. This flaw allows an authenticated user with low-level privileges to manipulate critical system settings. If exploited, this vulnerability can lead to unauthorized changes that compromise the integrity and security of affected devices. It is vital for users and administrators to take preventive measures, ensure proper access controls, and apply necessary patches to mitigate potential risks.

Affected Version(s)

AOS-CX 10.18.0000 <= 10.18.0001

AOS-CX 10.18.0000 <= 10.18.0001

AOS-CX 10.17.0000 <= 10.17.1021

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpe...

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

This vulnerability was discovered by internal security research at HPE Networking.
.