Out-of-Bounds Read Vulnerability in AOS-CX by HPE
CVE-2026-73761

6.5MEDIUM

Key Information:

Vendor

HP (HP)

Status
Aos-cx
Vendor
CVE Published:
1 September 2026

What is CVE-2026-73761?

An out-of-bounds read vulnerability in HPE's AOS-CX can lead to serious security issues, potentially allowing unauthorized access to sensitive information. Attackers can exploit this weakness by sending specially crafted packets, resulting in the possibility of disclosing confidential data from the operating system. It's crucial for users of AOS-CX to be aware of this vulnerability to safeguard their network integrity and secure sensitive information.

Affected Version(s)

AOS-CX 10.18.0000 <= 10.18.0001

AOS-CX 10.18.0000 <= 10.18.0001

AOS-CX 10.17.0000 <= 10.17.1021

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpe...

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

This vulnerability was discovered by internal security research at HPE Networking.
.