Advisoriesby IbisHewlett Packard EnterpriseCVE-2026-73763
Hewlett Packard Enterprise AOS-CX: remote code execution
No fix yet
A vulnerability exists in a management component that could allow an unauthenticated adjacent attacker to execute arbitrary commands. Successful exploitation could result in remote execution of arbitrary commands in the context of the affected utility.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| AOS-CX Product | >= 10.18.0000, <= 10.18.0001 | No fix yet |
| >= 10.17.0000, <= 10.17.1021 | No fix yet | |
| >= 10.16.0000, <= 10.16.1051 | No fix yet | |
| >= 10.13.0000, <= 10.13.1180 | No fix yet |
Details and references
- CVSS 3.1
- CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L
- Severity from
- the vendor (its own CVE record or advisory)
- Weakness
- CWE-77