Skip to content
CVE PROGRAM SOURCE RECORD8.1 High

CVE-2026-73777

Authorization Bypass Vulnerabilities Leading to Privilege Escalation in AOS-CX API Endpoint

Description

Vulnerabilities have been identified in the API endpoint of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Hewlett Packard Enterprise (HPE) AOS-CX

Default version status: affected

  • 10.18.0000 to ≤ 10.18.0001affected
  • 10.17.0000 to ≤ 10.17.1021affected
  • 10.16.0000 to ≤ 10.16.1051affected
  • 10.13.0000 to ≤ 10.13.1180affected
  • 10.10.0000 to ≤ 10.10.1180affected

References