AR
Product
Arubaos-cx
by Hpe · last CVE Sep 1, 2026
57
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 37Medium 15Low 2
Watch

Add Arubaos-cx to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-73778
9.8
1%
Sep 1
Credential Manager Vulnerability Allows Unauthorized Administrative Access
Affected: through 10.10.1180; 10.13.0000 through 10.13.1180; 10.16.0000 through 10.16.1051; 10.17.0000 through 10.17.1021; 10.18.0001
CVE-2026-73749
9.8
1%
Sep 1
Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-CX
Affected: before 10.10.1181; 10.13.0000 before 10.13.1190; 10.16.0000 before 10.16.1060; 10.17.0000 before 10.17.1030; 10.18.0001
CVE-2026-23813
9.8
1%
Mar 11
Authentication Bypass in Web Interface allows Unauthenticated Admin Password Reset
Affected: before 10.10.1180; 10.13.0000 before 10.13.1161; 10.16.0000 before 10.16.1030; 10.17.0000 before 10.17.1001
CVE-2026-73782
8.8
0%
Sep 1
Unauthenticated Format String Vulnerability leads to Remote Code Execution in AOS-CX
Affected: through 10.10.1180; 10.13.0000 through 10.13.1180; 10.16.0000 through 10.16.1051; 10.17.0000 through 10.17.1021; 10.18.0001
CVE-2026-73763
8.8
0%
Sep 1
Unauthenticated Remote Command Execution in Management Component
Affected: through 10.10.1180; 10.13.0000 through 10.13.1180; 10.16.0000 through 10.16.1051; 10.17.0000 through 10.17.1021; 10.18.0001
CVE-2026-73753
8.8
1%
Sep 1
Authenticated Remote Command Injection Vulnerabilities in AOS-CX Command Line Interface
Affected: before 10.10.1181; 10.13.0000 before 10.13.1190; 10.16.0000 before 10.16.1060; 10.17.0000 before 10.17.1030; 10.18.0001
CVE-2026-73752
8.8
0%
Sep 1
Unauthenticated Arbitrary File Write Vulnerability Leads to Remote Code Execution in AOS-CX
Affected: before 10.10.1181; 10.13.0000 before 10.13.1190; 10.16.0000 before 10.16.1060; 10.17.0000 before 10.17.1030; 10.18.0001
CVE-2026-73751
8.8
1%
Sep 1
Authenticated Remote Command Injection in AOS-CX Web-based Management Interface
Affected: before 10.10.1181; 10.13.0000 before 10.13.1190; 10.16.0000 before 10.16.1060; 10.17.0000 before 10.17.1030; 10.18.0001
CVE-2026-73750
8.8
1%
Sep 1
Authenticated Buffer Overflow Vulnerabilities in AOS-CX API Endpoint Leads to Possible Code Execution
Affected: before 10.10.1181; 10.13.0000 before 10.13.1190; 10.16.0000 before 10.16.1060; 10.17.0000 before 10.17.1030; 10.18.0001
CVE-2026-44880
8.8
1%
Jul 21
Low-Privilege Authenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-CX
Affected: through 10.13.1170; 10.16.0000 through 10.16.1050; 10.17.0000 through 10.17.1020; 10.18.0000 through 10.18.0001
CVE-2026-23816
8.8
1%
Mar 11
Authenticated Command Injection found in admin AOS-CX CLI command
Affected: before 10.10.1180; 10.13.0000 before 10.13.1161; 10.16.0000 before 10.16.1030; 10.17.0000 before 10.17.1001
CVE-2026-23814
8.8
1%
Mar 11
Authenticated Command Injection found in AOS-CX CLI Command
Affected: before 10.10.1180; 10.13.0000 before 10.13.1161; 10.16.0000 before 10.16.1030; 10.17.0000 before 10.17.1001
CVE-2025-37158
8.8
1%
Nov 18
A command injection vulnerability exists in the AOS-CX Operating System
Affected: 10.10.0000 before 10.10.1170; 10.13.0000 before 10.13.1101; 10.14.0000 before 10.14.1060; 10.15.0000 before 10.15.1030; 10.16.0000 before 10.16.1001
CVE-2025-37157
8.8
1%
Nov 18
A command injection vulnerability exists in the AOS-CX Operating System
Affected: 10.10.0000 before 10.10.1170; 10.13.0000 before 10.13.1101; 10.14.0000 before 10.14.1060; 10.15.0000 before 10.15.1030; 10.16.0000 before 10.16.1001
CVE-2023-3718
8.8
2%
Aug 1
An authenticated command injection vulnerability exists in the AOS-CX command line interface
Affected: 10.10.0000 through 10.10.1050; 10.11.0000 through 10.11.1010
CVE-2023-1168
8.8
1%
Mar 22
An authenticated remote code execution vulnerability exists in the AOS-CX Network Analytics Engine
Affected: 10.06.0000 before 10.06.0240; 10.08.0000 through 10.08.1070; 10.09.0000 through 10.09.1020; 10.10.0000 before 10.10.1030
CVE-2021-41001
8.8
3%
Mar 2
An authenticated remote code execution vulnerability was discovered in the AOS-CX Network Analytics Engine (NAE) in Aruba CX 6200F Switch Series, Aruba 6300 Switch Series, Aruba…
Affected: 10.07.0001 through 10.07.0050; 10.08.0001 through 10.08.1030; 10.09.0001 through 10.09.0002
CVE-2021-41000
8.8
3%
Mar 2
Multiple authenticated remote code execution vulnerabilities were discovered in the AOS-CX command line interface in Aruba CX 6200F Switch Series, Aruba 6300 Switch Series, Aruba…
Affected: 10.06.0001 through 10.06.0170; 10.07.0001 through 10.07.0020; 10.08.0001
CVE-2026-73781
8.4
1%
Sep 1
Authenticated Stored Cross-Site Scripting Vulnerability (XSS) in AOS-CX Web-Based Management Interface
Affected: through 10.10.1180; 10.13.0000 through 10.13.1180; 10.16.0000 through 10.16.1051; 10.17.0000 through 10.17.1021; 10.18.0001
CVE-2026-73780
8.3
0%
Sep 1
Lack of Cross-Site Request Forgery (CSRF) Protections for Certificate-Authenticated Sessions in AOS-CX
Affected: before 10.10.1181; 10.13.0000 before 10.13.1190; 10.16.0000 before 10.16.1060; 10.17.0000 before 10.17.1030; 10.18.0001
CVE-2026-73779
8.2
0%
Sep 1
Authentication Bypass Vulnerabilities Leading to Information Disclosure, Unauthorized Modification, and Service Disruption in AOS-CX
Affected: through 10.10.1180; 10.13.0000 through 10.13.1180; 10.16.0000 through 10.16.1051; 10.17.0000 through 10.17.1021; 10.18.0001
CVE-2026-73777
8.1
0%
Sep 1
Authorization Bypass Vulnerabilities Leading to Privilege Escalation in AOS-CX API Endpoint
Affected: through 10.10.1180; 10.13.0000 through 10.13.1180; 10.16.0000 through 10.16.1051; 10.17.0000 through 10.17.1021; 10.18.0001
CVE-2021-41002
8.1
1%
Mar 2
Multiple authenticated remote path traversal vulnerabilities were discovered in the AOS-CX command line interface in Aruba CX 6200F Switch Series, Aruba 6300 Switch Series, Aruba…
Affected: 10.06.0001 through 10.06.0170; 10.07.0001 through 10.07.0050; 10.08.0001 through 10.08.1030; 10.09.0001 through 10.09.0002
CVE-2026-73776
7.9
0%
Sep 1
Authenticated Signature Verification Bypass Leading to Arbitrary Code Execution in AOS-CX
Affected: through 10.10.1180; 10.13.0000 through 10.13.1180; 10.16.0000 through 10.16.1051; 10.17.0000 through 10.17.1021; 10.18.0001
CVE-2025-37155
7.8
0%
Nov 18
A vulnerability in the SSH restricted shell interface of the network management services allows improper access control for authenticated read-only users
Affected: 10.10.0000 before 10.10.1170; 10.13.0000 before 10.13.1101; 10.14.0000 before 10.14.1060; 10.15.0000 before 10.15.1030; 10.16.0000 before 10.16.1001
CVE-2026-73775
7.7
0%
Sep 1
Authenticated Sensitive Information Disclosure Vulnerabilities in AOS-CX
Affected: through 10.10.1180; 10.13.0000 through 10.13.1180; 10.16.0000 through 10.16.1051; 10.17.0000 through 10.17.1021; 10.18.0001
CVE-2026-73774
7.6
0%
Sep 1
Unauthenticated Buffer Overflow Vulnerability leads to Sensitive Information Disclosure in AOS-CX
Affected: through 10.10.1180; 10.13.0000 through 10.13.1180; 10.16.0000 through 10.16.1051; 10.17.0000 through 10.17.1021; 10.18.0001
CVE-2026-73773
7.5
0%
Sep 1
Unauthenticated Denial-of-Service (DoS) Vulnerability in AOS-CX
Affected: through 10.10.1180; 10.13.0000 through 10.13.1180; 10.16.0000 through 10.16.1051; 10.17.0000 through 10.17.1021; 10.18.0001
CVE-2026-73771
7.5
0%
Sep 1
Improper Authentication Handling in AOS-CX Management Interface and API
Affected: through 10.10.1180; 10.13.0000 through 10.13.1180; 10.16.0000 through 10.16.1051; 10.17.0000 through 10.17.1021; 10.18.0001
CVE-2002-20001
7.5
25%
Nov 11
The Diffie-Hellman Key Agreement Protocol allows remote attackers (from the client side) to send arbitrary numbers that are actually not public keys, and trigger expensive…
Affected: 10.06.0000 before 10.06.0180; 10.07.0000 before 10.07.0030; 10.08.0000 before 10.08.0010; 10.09.0000 before 10.09.0002
CVE-2026-73770
7.3
0%
Sep 1
Authenticated Arbitrary File Write Vulnerability Leading to Remote Code Execution in AOS-CX
Affected: through 10.10.1180; 10.13.0000 through 10.13.1180; 10.16.0000 through 10.16.1051; 10.17.0000 through 10.17.1021; 10.18.0001
CVE-2026-73768
7.3
0%
Sep 1
Local Privilege Escalation in AOS-CX Command Line Interface
Affected: through 10.10.1180; 10.13.0000 through 10.13.1180; 10.16.0000 through 10.16.1051; 10.17.0000 through 10.17.1021; 10.18.0001
CVE-2025-37159
7.3
0%
Nov 18
A vulnerability in the web management interface of the AOS-CX OS user authentication service could allow an authenticated remote attacker to hijack an active user session
Affected: 10.10.0000 before 10.10.1170; 10.13.0000 before 10.13.1101; 10.14.0000 before 10.14.1060; 10.15.0000 before 10.15.1030; 10.16.0000 before 10.16.1001
CVE-2026-73767
7.2
2%
Sep 1
Authenticated Remote Command Injection Vulnerabilities in AOS-CX Command Line Interface
Affected: through 10.10.1180; 10.13.0000 through 10.13.1180; 10.16.0000 through 10.16.1051; 10.17.0000 through 10.17.1021; 10.18.0001
CVE-2026-73766
7.2
1%
Sep 1
Authenticated Command Injection Vulnerabilities in the API Endpoint of AOS-CX
Affected: through 10.10.1180; 10.13.0000 through 10.13.1180; 10.16.0000 through 10.16.1051; 10.17.0000 through 10.17.1021; 10.18.0001
CVE-2026-73765
7.2
1%
Sep 1
Authenticated Path Traversal Vulnerabilities Lead to Remote Code Execution in AOS-CX
Affected: through 10.10.1180; 10.13.0000 through 10.13.1180; 10.16.0000 through 10.16.1051; 10.17.0000 through 10.17.1021; 10.18.0001
CVE-2026-63454
7.2
1%
Jul 21
Authenticated Path Traversal Vulnerability Leads to Remote Code Execution in AOS-CX
Affected: through 10.13.1170; 10.16.0000 through 10.16.1050; 10.17.0000 through 10.17.1020; 10.18.0000 through 10.18.0001
CVE-2026-63453
7.2
1%
Jul 21
Authenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-CX
Affected: through 10.13.1170; 10.16.0000 through 10.16.1050; 10.17.0000 through 10.17.1020; 10.18.0000 through 10.18.0001
CVE-2026-23815
7.2
1%
Mar 11
Authenticated Command Injection found in AOS-CX Administrative CLI Command
Affected: before 10.10.1180; 10.13.0000 before 10.13.1161; 10.16.0000 before 10.16.1030; 10.17.0000 before 10.17.1001
CVE-2026-73764
7.1
0%
Sep 1
Authentication Bypass Vulnerabilities Leading to Unauthorized Modification and Service Disruption in AOS-CX
Affected: through 10.10.1180; 10.13.0000 through 10.13.1180; 10.16.0000 through 10.16.1051; 10.17.0000 through 10.17.1021; 10.18.0001
CVE-2025-37156
6.8
0%
Nov 18
A platform-level denial-of-service (DoS) vulnerability exists in ArubaOS-CX software
Affected: 10.10.0000 before 10.10.1170; 10.13.0000 before 10.13.1101; 10.14.0000 before 10.14.1060; 10.15.0000 before 10.15.1030; 10.16.0000 before 10.16.1001
CVE-2026-73762
6.6
0%
Sep 1
Authorization Bypass in the API Endpoint of AOS-CX Leads to Unauthorized Access
Affected: through 10.10.1180; 10.13.0000 through 10.13.1180; 10.16.0000 through 10.16.1051; 10.17.0000 through 10.17.1021; 10.18.0001
CVE-2026-73772
6.5
0%
Sep 1
Unauthenticated Buffer Overflow Vulnerabilities lead to Denial-of-Service in AOS-CX
Affected: through 10.10.1180; 10.13.0000 through 10.13.1180; 10.16.0000 through 10.16.1051; 10.17.0000 through 10.17.1021; 10.18.0001
CVE-2026-73761
6.5
0%
Sep 1
Unauthenticated Out-of-Bounds Read Vulnerability leads to Information Disclosure in AOS-CX
Affected: through 10.10.1180; 10.13.0000 through 10.13.1180; 10.16.0000 through 10.16.1051; 10.17.0000 through 10.17.1021; 10.18.0001
CVE-2026-73760
6.5
1%
Sep 1
Authenticated Path Traversal Vulnerability Leads to Remote Unauthorized Access to Files in AOS-CX
Affected: through 10.10.1180; 10.13.0000 through 10.13.1180; 10.16.0000 through 10.16.1051; 10.17.0000 through 10.17.1021; 10.18.0001
CVE-2026-73759
6.5
0%
Sep 1
Unauthenticated Denial-of-Service Vulnerabilities in AOS-CX
Affected: before 10.10.1181; 10.13.0000 before 10.13.1190; 10.16.0000 before 10.16.1060; 10.17.0000 before 10.17.1030; 10.18.0001
CVE-2026-73758
6.5
0%
Sep 1
Authenticated Privilege Escalation Vulnerability via Broken Access Control in AOS-CX
Affected: through 10.10.1180; 10.13.0000 through 10.13.1180; 10.16.0000 through 10.16.1051; 10.17.0000 through 10.17.1021; 10.18.0001
CVE-2025-37160
6.5
0%
Nov 18
A broken access control (BAC) vulnerability in the web-based management interface could allow an authenticated remote attacker with low privileges to view sensitive information
Affected: 10.10.0000 before 10.10.1170; 10.13.0000 before 10.13.1101; 10.14.0000 before 10.14.1060; 10.15.0000 before 10.15.1030; 10.16.0000 before 10.16.1001
CVE-2026-73757
6.4
0%
Sep 1
Authenticated Server-Side Request Forgery (SSRF) Leading to Information Disclosure in AOS-CX
Affected: through 10.10.1180; 10.13.0000 through 10.13.1180; 10.16.0000 through 10.16.1051; 10.17.0000 through 10.17.1021; 10.18.0001
CVE-2026-23817
6.1
0%
Mar 11
Unauthenticated Open Redirect allows URL Manipulation in Web Interface
Affected: 10.06.0000 before 10.10.1180; 10.13.0000 before 10.13.1161; 10.16.0000 before 10.16.1030; 10.17.0000 before 10.17.1001
Page 1 of 2 · 57 total