Authentication Vulnerability in HPE AOS-CX Management Interface
CVE-2026-73771

7.5HIGH

Key Information:

Vendor

HP (HP)

Status
Aos-cx
Vendor
CVE Published:
1 September 2026

What is CVE-2026-73771?

An authentication vulnerability has been identified in the HPE AOS-CX management interface and API, potentially allowing an unauthenticated remote attacker to exploit the system under certain conditions. This issue may enable the bypassing of authentication controls or lead to the exhaustion of system resources. Should the exploitation be successful, it could result in unauthorized access to sensitive management operations or a denial of service affecting the management interface.

Affected Version(s)

AOS-CX 10.18.0000 <= 10.18.0001

AOS-CX 10.18.0000 <= 10.18.0001

AOS-CX 10.17.0000 <= 10.17.1021

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpe...

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

This vulnerability was discovered by internal security research at HPE Networking.
.