Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2026-73758

Authenticated Privilege Escalation Vulnerability via Broken Access Control in AOS-CX

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
hpe

Description

A privilege escalation vulnerability exists in the API endpoint of AOS-CX. Successful exploitation could allow an authenticated low privilege operator user to change the state of certain settings of a vulnerable system.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Hewlett Packard Enterprise (HPE) AOS-CX

Default version status: affected

  • 10.18.0000 to ≤ 10.18.0001affected
  • 10.17.0000 to ≤ 10.17.1021affected
  • 10.16.0000 to ≤ 10.16.1051affected
  • 10.13.0000 to ≤ 10.13.1180affected
  • 10.10.0000 to ≤ 10.10.1180affected

References