AO
Product
AOS-CX
by Hewlett Packard Enterprise (HPE) · last CVE Sep 1, 2026
38
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 24Medium 11Low 1
Watch

Add AOS-CX to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-73782
8.8
0%
Sep 1
Unauthenticated Format String Vulnerability leads to Remote Code Execution in AOS-CX
Affected: 10.18.0000 through 10.18.0001; 10.17.0000 through 10.17.1021; 10.16.0000 through 10.16.1051; 10.13.0000 through 10.13.1180; 10.10.0000 through 10.10.1180
CVE-2026-73763
8.8
0%
Sep 1
Unauthenticated Remote Command Execution in Management Component
Affected: 10.18.0000 through 10.18.0001; 10.17.0000 through 10.17.1021; 10.16.0000 through 10.16.1051; 10.13.0000 through 10.13.1180; 10.10.0000 through 10.10.1180
CVE-2026-73753
8.8
1%
Sep 1
Authenticated Remote Command Injection Vulnerabilities in AOS-CX Command Line Interface
Affected: 10.18.0000 through 10.18.0001; 10.17.0000 through 10.17.1021; 10.16.0000 through 10.16.1051; 10.13.0000 through 10.13.1180; 10.10.0000 through 10.10.1180
CVE-2026-73752
8.8
0%
Sep 1
Unauthenticated Arbitrary File Write Vulnerability Leads to Remote Code Execution in AOS-CX
Affected: 10.18.0000 through 10.18.0001; 10.17.0000 through 10.17.1021; 10.16.0000 through 10.16.1051; 10.13.0000 through 10.13.1180; 10.10.0000 through 10.10.1180
CVE-2026-73751
8.8
1%
Sep 1
Authenticated Remote Command Injection in AOS-CX Web-based Management Interface
Affected: 10.18.0000 through 10.18.0001; 10.17.0000 through 10.17.1021; 10.16.0000 through 10.16.1051; 10.13.0000 through 10.13.1180; 10.10.0000 through 10.10.1180
CVE-2026-73750
8.8
1%
Sep 1
Authenticated Buffer Overflow Vulnerabilities in AOS-CX API Endpoint Leads to Possible Code Execution
Affected: 10.18.0000 through 10.18.0001; 10.17.0000 through 10.17.1021; 10.16.0000 through 10.16.1051; 10.13.0000 through 10.13.1180; 10.10.0000 through 10.10.1180
CVE-2026-44880
8.8
1%
Jul 21
Low-Privilege Authenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-CX
Affected: 10.17.0000 through 10.17.1020; 10.16.0000 through 10.16.1050; 10.13.0000 through 10.13.1170; 10.18.0000 before 10.18.0001
CVE-2026-73781
8.4
1%
Sep 1
Authenticated Stored Cross-Site Scripting Vulnerability (XSS) in AOS-CX Web-Based Management Interface
Affected: 10.18.0000 through 10.18.0001; 10.17.0000 through 10.17.1021; 10.16.0000 through 10.16.1051; 10.13.0000 through 10.13.1180; 10.10.0000 through 10.10.1180
CVE-2026-73780
8.3
0%
Sep 1
Lack of Cross-Site Request Forgery (CSRF) Protections for Certificate-Authenticated Sessions in AOS-CX
Affected: 10.18.0000 through 10.18.0001; 10.17.0000 through 10.17.1021; 10.16.0000 through 10.16.1051; 10.13.0000 through 10.13.1180; 10.10.0000 through 10.10.1180
CVE-2026-73779
8.2
0%
Sep 1
Authentication Bypass Vulnerabilities Leading to Information Disclosure, Unauthorized Modification, and Service Disruption in AOS-CX
Affected: 10.18.0000 through 10.18.0001; 10.17.0000 through 10.17.1021; 10.16.0000 through 10.16.1051; 10.13.0000 through 10.13.1180; 10.10.0000 through 10.10.1180
CVE-2026-73777
8.1
0%
Sep 1
Authorization Bypass Vulnerabilities Leading to Privilege Escalation in AOS-CX API Endpoint
Affected: 10.18.0000 through 10.18.0001; 10.17.0000 through 10.17.1021; 10.16.0000 through 10.16.1051; 10.13.0000 through 10.13.1180; 10.10.0000 through 10.10.1180
CVE-2026-73776
7.9
0%
Sep 1
Authenticated Signature Verification Bypass Leading to Arbitrary Code Execution in AOS-CX
Affected: 10.18.0000 through 10.18.0001; 10.17.0000 through 10.17.1021; 10.16.0000 through 10.16.1051; 10.13.0000 through 10.13.1180; 10.10.0000 through 10.10.1180
CVE-2026-73775
7.7
0%
Sep 1
Authenticated Sensitive Information Disclosure Vulnerabilities in AOS-CX
Affected: 10.18.0000 through 10.18.0001; 10.17.0000 through 10.17.1021; 10.16.0000 through 10.16.1051; 10.13.0000 through 10.13.1180; 10.10.0000 through 10.10.1180
CVE-2026-73774
7.6
0%
Sep 1
Unauthenticated Buffer Overflow Vulnerability leads to Sensitive Information Disclosure in AOS-CX
Affected: 10.18.0000 through 10.18.0001; 10.17.0000 through 10.17.1021; 10.16.0000 through 10.16.1051; 10.13.0000 through 10.13.1180; 10.10.0000 through 10.10.1180
CVE-2026-73773
7.5
0%
Sep 1
Unauthenticated Denial-of-Service (DoS) Vulnerability in AOS-CX
Affected: 10.18.0000 through 10.18.0001; 10.17.0000 through 10.17.1021; 10.16.0000 through 10.16.1051; 10.13.0000 through 10.13.1180; 10.10.0000 through 10.10.1180
CVE-2026-73771
7.5
0%
Sep 1
Improper Authentication Handling in AOS-CX Management Interface and API
Affected: 10.18.0000 through 10.18.0001; 10.17.0000 through 10.17.1021; 10.16.0000 through 10.16.1051; 10.13.0000 through 10.13.1180; 10.10.0000 through 10.10.1180
CVE-2026-73770
7.3
0%
Sep 1
Authenticated Arbitrary File Write Vulnerability Leading to Remote Code Execution in AOS-CX
Affected: 10.18.0000 through 10.18.0001; 10.17.0000 through 10.17.1021; 10.16.0000 through 10.16.1051; 10.13.0000 through 10.13.1180; 10.10.0000 through 10.10.1180
CVE-2026-73768
7.3
0%
Sep 1
Local Privilege Escalation in AOS-CX Command Line Interface
Affected: 10.18.0000 through 10.18.0001; 10.17.0000 through 10.17.1021; 10.16.0000 through 10.16.1051; 10.13.0000 through 10.13.1180; 10.10.0000 through 10.10.1180
CVE-2026-73767
7.2
2%
Sep 1
Authenticated Remote Command Injection Vulnerabilities in AOS-CX Command Line Interface
Affected: 10.18.0000 through 10.18.0001; 10.17.0000 through 10.17.1021; 10.16.0000 through 10.16.1051; 10.13.0000 through 10.13.1180; 10.10.0000 through 10.10.1180
CVE-2026-73766
7.2
1%
Sep 1
Authenticated Command Injection Vulnerabilities in the API Endpoint of AOS-CX
Affected: 10.18.0000 through 10.18.0001; 10.17.0000 through 10.17.1021; 10.16.0000 through 10.16.1051; 10.13.0000 through 10.13.1180; 10.10.0000 through 10.10.1180
CVE-2026-73765
7.2
1%
Sep 1
Authenticated Path Traversal Vulnerabilities Lead to Remote Code Execution in AOS-CX
Affected: 10.18.0000 through 10.18.0001; 10.17.0000 through 10.17.1021; 10.16.0000 through 10.16.1051; 10.13.0000 through 10.13.1180; 10.10.0000 through 10.10.1180
CVE-2026-63454
7.2
1%
Jul 21
Authenticated Path Traversal Vulnerability Leads to Remote Code Execution in AOS-CX
Affected: 10.17.0000 through 10.17.1020; 10.16.0000 through 10.16.1050; 10.13.0000 through 10.13.1180; 10.18.0000 before 10.18.0001
CVE-2026-63453
7.2
1%
Jul 21
Authenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-CX
Affected: 10.17.0000 through 10.17.1020; 10.16.0000 through 10.16.1050; 10.13.0000 through 10.13.1170; 10.18.0000 before 10.18.0001
CVE-2026-73764
7.1
0%
Sep 1
Authentication Bypass Vulnerabilities Leading to Unauthorized Modification and Service Disruption in AOS-CX
Affected: 10.18.0000 through 10.18.0001; 10.17.0000 through 10.17.1021; 10.16.0000 through 10.16.1051; 10.13.0000 through 10.13.1180; 10.10.0000 through 10.10.1180
Showing 24