Path Traversal Vulnerability in AOS-CX by HPE
CVE-2026-73760

6.5MEDIUM

Key Information:

Vendor

HP (HP)

Status
Aos-cx
Vendor
CVE Published:
1 September 2026

What is CVE-2026-73760?

An authenticated Path Traversal vulnerability in AOS-CX allows an attacker to exploit the web-based management interface, enabling unauthorized access to arbitrary files within the underlying operating system. This could potentially result in sensitive data exposure and unauthorized manipulation of files, posing serious security risks to the affected systems. It is crucial for users of AOS-CX to apply appropriate security measures and patches to safeguard against this threat.

Affected Version(s)

AOS-CX 10.18.0000 <= 10.18.0001

AOS-CX 10.18.0000 <= 10.18.0001

AOS-CX 10.17.0000 <= 10.17.1021

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpe...

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

This vulnerability was discovered by internal security research at HPE Networking.
.