CVE-2026-73771: HPE Arubaos-Cx

High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days.

An authentication vulnerability exists in the AOS-CX management interface and API that may allow improper authentication processing. An unauthenticated remote attacker could exploit this vulnerability under specific conditions to bypass authentication controls or exhaust system resources. Successful exploitation could result in unauthorized access or denial of service affecting the management interface.

Affected products

• HPE Arubaos-Cx: up to and including 10.10.1180; from 10.13.0000, up to and including 10.13.1180; from 10.16.0000, up to and including 10.16.1051; from 10.17.0000, up to and including 10.17.1021; version 10.18.0001 only

Published 2026-09-01. Last modified 2026-09-04.