AO
Product
AOS-CX
by Hewlett Packard Enterprise (HPE) · last CVE Sep 1, 2026
38
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 24Medium 11Low 1
Watch

Add AOS-CX to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-73778
9.8
1%
Sep 1
Credential Manager Vulnerability Allows Unauthorized Administrative Access
Affected: 10.18.0000 through 10.18.0001; 10.17.0000 through 10.17.1021; 10.16.0000 through 10.16.1051; 10.13.0000 through 10.13.1180; 10.10.0000 through 10.10.1180
CVE-2026-73749
9.8
1%
Sep 1
Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-CX
Affected: 10.18.0000 through 10.18.0001; 10.17.0000 through 10.17.1021; 10.16.0000 through 10.16.1051; 10.13.0000 through 10.13.1180; 10.10.0000 through 10.10.1180
CVE-2026-73782
8.8
0%
Sep 1
Unauthenticated Format String Vulnerability leads to Remote Code Execution in AOS-CX
Affected: 10.18.0000 through 10.18.0001; 10.17.0000 through 10.17.1021; 10.16.0000 through 10.16.1051; 10.13.0000 through 10.13.1180; 10.10.0000 through 10.10.1180
CVE-2026-73763
8.8
0%
Sep 1
Unauthenticated Remote Command Execution in Management Component
Affected: 10.18.0000 through 10.18.0001; 10.17.0000 through 10.17.1021; 10.16.0000 through 10.16.1051; 10.13.0000 through 10.13.1180; 10.10.0000 through 10.10.1180
CVE-2026-73753
8.8
1%
Sep 1
Authenticated Remote Command Injection Vulnerabilities in AOS-CX Command Line Interface
Affected: 10.18.0000 through 10.18.0001; 10.17.0000 through 10.17.1021; 10.16.0000 through 10.16.1051; 10.13.0000 through 10.13.1180; 10.10.0000 through 10.10.1180
CVE-2026-73752
8.8
0%
Sep 1
Unauthenticated Arbitrary File Write Vulnerability Leads to Remote Code Execution in AOS-CX
Affected: 10.18.0000 through 10.18.0001; 10.17.0000 through 10.17.1021; 10.16.0000 through 10.16.1051; 10.13.0000 through 10.13.1180; 10.10.0000 through 10.10.1180
CVE-2026-73751
8.8
1%
Sep 1
Authenticated Remote Command Injection in AOS-CX Web-based Management Interface
Affected: 10.18.0000 through 10.18.0001; 10.17.0000 through 10.17.1021; 10.16.0000 through 10.16.1051; 10.13.0000 through 10.13.1180; 10.10.0000 through 10.10.1180
CVE-2026-73750
8.8
1%
Sep 1
Authenticated Buffer Overflow Vulnerabilities in AOS-CX API Endpoint Leads to Possible Code Execution
Affected: 10.18.0000 through 10.18.0001; 10.17.0000 through 10.17.1021; 10.16.0000 through 10.16.1051; 10.13.0000 through 10.13.1180; 10.10.0000 through 10.10.1180
CVE-2026-44880
8.8
1%
Jul 21
Low-Privilege Authenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-CX
Affected: 10.17.0000 through 10.17.1020; 10.16.0000 through 10.16.1050; 10.13.0000 through 10.13.1170; 10.18.0000 before 10.18.0001
CVE-2026-73781
8.4
1%
Sep 1
Authenticated Stored Cross-Site Scripting Vulnerability (XSS) in AOS-CX Web-Based Management Interface
Affected: 10.18.0000 through 10.18.0001; 10.17.0000 through 10.17.1021; 10.16.0000 through 10.16.1051; 10.13.0000 through 10.13.1180; 10.10.0000 through 10.10.1180
CVE-2026-73780
8.3
0%
Sep 1
Lack of Cross-Site Request Forgery (CSRF) Protections for Certificate-Authenticated Sessions in AOS-CX
Affected: 10.18.0000 through 10.18.0001; 10.17.0000 through 10.17.1021; 10.16.0000 through 10.16.1051; 10.13.0000 through 10.13.1180; 10.10.0000 through 10.10.1180
CVE-2026-73779
8.2
0%
Sep 1
Authentication Bypass Vulnerabilities Leading to Information Disclosure, Unauthorized Modification, and Service Disruption in AOS-CX
Affected: 10.18.0000 through 10.18.0001; 10.17.0000 through 10.17.1021; 10.16.0000 through 10.16.1051; 10.13.0000 through 10.13.1180; 10.10.0000 through 10.10.1180
CVE-2026-73777
8.1
0%
Sep 1
Authorization Bypass Vulnerabilities Leading to Privilege Escalation in AOS-CX API Endpoint
Affected: 10.18.0000 through 10.18.0001; 10.17.0000 through 10.17.1021; 10.16.0000 through 10.16.1051; 10.13.0000 through 10.13.1180; 10.10.0000 through 10.10.1180
CVE-2026-73776
7.9
0%
Sep 1
Authenticated Signature Verification Bypass Leading to Arbitrary Code Execution in AOS-CX
Affected: 10.18.0000 through 10.18.0001; 10.17.0000 through 10.17.1021; 10.16.0000 through 10.16.1051; 10.13.0000 through 10.13.1180; 10.10.0000 through 10.10.1180
CVE-2026-73775
7.7
0%
Sep 1
Authenticated Sensitive Information Disclosure Vulnerabilities in AOS-CX
Affected: 10.18.0000 through 10.18.0001; 10.17.0000 through 10.17.1021; 10.16.0000 through 10.16.1051; 10.13.0000 through 10.13.1180; 10.10.0000 through 10.10.1180
CVE-2026-73774
7.6
0%
Sep 1
Unauthenticated Buffer Overflow Vulnerability leads to Sensitive Information Disclosure in AOS-CX
Affected: 10.18.0000 through 10.18.0001; 10.17.0000 through 10.17.1021; 10.16.0000 through 10.16.1051; 10.13.0000 through 10.13.1180; 10.10.0000 through 10.10.1180
CVE-2026-73773
7.5
0%
Sep 1
Unauthenticated Denial-of-Service (DoS) Vulnerability in AOS-CX
Affected: 10.18.0000 through 10.18.0001; 10.17.0000 through 10.17.1021; 10.16.0000 through 10.16.1051; 10.13.0000 through 10.13.1180; 10.10.0000 through 10.10.1180
CVE-2026-73771
7.5
0%
Sep 1
Improper Authentication Handling in AOS-CX Management Interface and API
Affected: 10.18.0000 through 10.18.0001; 10.17.0000 through 10.17.1021; 10.16.0000 through 10.16.1051; 10.13.0000 through 10.13.1180; 10.10.0000 through 10.10.1180
CVE-2026-73770
7.3
0%
Sep 1
Authenticated Arbitrary File Write Vulnerability Leading to Remote Code Execution in AOS-CX
Affected: 10.18.0000 through 10.18.0001; 10.17.0000 through 10.17.1021; 10.16.0000 through 10.16.1051; 10.13.0000 through 10.13.1180; 10.10.0000 through 10.10.1180
CVE-2026-73768
7.3
0%
Sep 1
Local Privilege Escalation in AOS-CX Command Line Interface
Affected: 10.18.0000 through 10.18.0001; 10.17.0000 through 10.17.1021; 10.16.0000 through 10.16.1051; 10.13.0000 through 10.13.1180; 10.10.0000 through 10.10.1180
CVE-2026-73767
7.2
2%
Sep 1
Authenticated Remote Command Injection Vulnerabilities in AOS-CX Command Line Interface
Affected: 10.18.0000 through 10.18.0001; 10.17.0000 through 10.17.1021; 10.16.0000 through 10.16.1051; 10.13.0000 through 10.13.1180; 10.10.0000 through 10.10.1180
CVE-2026-73766
7.2
1%
Sep 1
Authenticated Command Injection Vulnerabilities in the API Endpoint of AOS-CX
Affected: 10.18.0000 through 10.18.0001; 10.17.0000 through 10.17.1021; 10.16.0000 through 10.16.1051; 10.13.0000 through 10.13.1180; 10.10.0000 through 10.10.1180
CVE-2026-73765
7.2
1%
Sep 1
Authenticated Path Traversal Vulnerabilities Lead to Remote Code Execution in AOS-CX
Affected: 10.18.0000 through 10.18.0001; 10.17.0000 through 10.17.1021; 10.16.0000 through 10.16.1051; 10.13.0000 through 10.13.1180; 10.10.0000 through 10.10.1180
CVE-2026-63454
7.2
1%
Jul 21
Authenticated Path Traversal Vulnerability Leads to Remote Code Execution in AOS-CX
Affected: 10.17.0000 through 10.17.1020; 10.16.0000 through 10.16.1050; 10.13.0000 through 10.13.1180; 10.18.0000 before 10.18.0001
CVE-2026-63453
7.2
1%
Jul 21
Authenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-CX
Affected: 10.17.0000 through 10.17.1020; 10.16.0000 through 10.16.1050; 10.13.0000 through 10.13.1170; 10.18.0000 before 10.18.0001
CVE-2026-73764
7.1
0%
Sep 1
Authentication Bypass Vulnerabilities Leading to Unauthorized Modification and Service Disruption in AOS-CX
Affected: 10.18.0000 through 10.18.0001; 10.17.0000 through 10.17.1021; 10.16.0000 through 10.16.1051; 10.13.0000 through 10.13.1180; 10.10.0000 through 10.10.1180
CVE-2026-73762
6.6
0%
Sep 1
Authorization Bypass in the API Endpoint of AOS-CX Leads to Unauthorized Access
Affected: 10.18.0000 through 10.18.0001; 10.17.0000 through 10.17.1021; 10.16.0000 through 10.16.1051; 10.13.0000 through 10.13.1180; 10.10.0000 through 10.10.1180
CVE-2026-73772
6.5
0%
Sep 1
Unauthenticated Buffer Overflow Vulnerabilities lead to Denial-of-Service in AOS-CX
Affected: 10.18.0000 through 10.18.0001; 10.17.0000 through 10.17.1021; 10.16.0000 through 10.16.1051; 10.13.0000 through 10.13.1180; 10.10.0000 through 10.10.1180
CVE-2026-73761
6.5
0%
Sep 1
Unauthenticated Out-of-Bounds Read Vulnerability leads to Information Disclosure in AOS-CX
Affected: 10.18.0000 through 10.18.0001; 10.17.0000 through 10.17.1021; 10.16.0000 through 10.16.1051; 10.13.0000 through 10.13.1180; 10.10.0000 through 10.10.1180
CVE-2026-73760
6.5
1%
Sep 1
Authenticated Path Traversal Vulnerability Leads to Remote Unauthorized Access to Files in AOS-CX
Affected: 10.18.0000 through 10.18.0001; 10.17.0000 through 10.17.1021; 10.16.0000 through 10.16.1051; 10.13.0000 through 10.13.1180; 10.10.0000 through 10.10.1180
CVE-2026-73759
6.5
0%
Sep 1
Unauthenticated Denial-of-Service Vulnerabilities in AOS-CX
Affected: 10.18.0000 through 10.18.0001; 10.17.0000 through 10.17.1021; 10.16.0000 through 10.16.1051; 10.13.0000 through 10.13.1180; 10.10.0000 through 10.10.1180
CVE-2026-73758
6.5
0%
Sep 1
Authenticated Privilege Escalation Vulnerability via Broken Access Control in AOS-CX
Affected: 10.18.0000 through 10.18.0001; 10.17.0000 through 10.17.1021; 10.16.0000 through 10.16.1051; 10.13.0000 through 10.13.1180; 10.10.0000 through 10.10.1180
CVE-2026-73757
6.4
0%
Sep 1
Authenticated Server-Side Request Forgery (SSRF) Leading to Information Disclosure in AOS-CX
Affected: 10.18.0000 through 10.18.0001; 10.17.0000 through 10.17.1021; 10.16.0000 through 10.16.1051; 10.13.0000 through 10.13.1180; 10.10.0000 through 10.10.1180
CVE-2026-73756
5.9
0%
Sep 1
Unauthenticated Sensitive Information Disclosure via Man-in-the-Middle in AOS-CX via API Endpoint
Affected: 10.18.0000 through 10.18.0001; 10.17.0000 through 10.17.1021; 10.16.0000 through 10.16.1051; 10.13.0000 through 10.13.1180; 10.10.0000 through 10.10.1180
CVE-2026-73755
5.7
0%
Sep 1
Privilege Escalation via Unauthorized Access to Sensitive Session Information
Affected: 10.18.0000 through 10.18.0001; 10.17.0000 through 10.17.1021; 10.16.0000 through 10.16.1051; 10.13.0000 through 10.13.1180; 10.10.0000 through 10.10.1180
CVE-2026-73754
5.3
0%
Sep 1
Authenticated Denial-of-Service Vulnerabilities in the Command Line Interface of AOS-CX
Affected: 10.18.0000 through 10.18.0001; 10.17.0000 through 10.17.1021; 10.16.0000 through 10.16.1051; 10.13.0000 through 10.13.1180; 10.10.0000 through 10.10.1180
CVE-2026-73783
4.9
0%
Sep 1
Authenticated Stack Overflow Vulnerabilities lead to Denial-of-Service in AOS-CX
Affected: 10.18.0000 through 10.18.0001; 10.17.0000 through 10.17.1021; 10.16.0000 through 10.16.1051; 10.13.0000 through 10.13.1180; 10.10.0000 through 10.10.1180
CVE-2024-54010
3.4
0%
Jan 8
Unauthenticated Traffic Handling Flaw Allows Packet Leakage on HPE Aruba Networking CX 10000 series switches
Affected: Version 10.10.0000: 10.10.1140 and below through <=10.10.1140; Version 10.13.0000: 10.13.1060 and below through <=10.13.1060; Version 10.14.0000: 10.14.1020 and below through <=10.14.1020; Version 10.15.0000: 10.15.0005 and below through <=10.15.0005
Showing 38