Format String Vulnerability in AOS-CX Command Line Interface by HPE
CVE-2026-73782

8.8HIGH

Key Information:

Vendor

HP (HP)

Status
Aos-cx
Vendor
CVE Published:
1 September 2026

What is CVE-2026-73782?

The command line interface of AOS-CX by HPE is affected by a format string vulnerability that may allow remote attackers to execute arbitrary code with elevated privileges. Exploitation can occur without authentication, posing significant risk to systems utilizing this software. Immediate action and mitigation are advised for affected users.

Affected Version(s)

AOS-CX 10.18.0000 <= 10.18.0001

AOS-CX 10.18.0000 <= 10.18.0001

AOS-CX 10.17.0000 <= 10.17.1021

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpe...

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

This vulnerability was discovered by internal security research at HPE Networking.
.