AR
Product
Arubaos-cx
by Hpe · last CVE Sep 1, 2026
57
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 37Medium 15Low 2
Watch

Add Arubaos-cx to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-37156
6.8
0%
Nov 18
ArubaOS-CX Platform-Level Denial-of-Service Vulnerability
Affected: 10.10.0000 before 10.10.1170; 10.13.0000 before 10.13.1101; 10.14.0000 before 10.14.1060; 10.15.0000 before 10.15.1030; 10.16.0000 before 10.16.1001
CVE-2026-73762
6.6
0%
Sep 1
Authorization Bypass in the API Endpoint of AOS-CX Leads to Unauthorized Access
Affected: through 10.10.1180; 10.13.0000 through 10.13.1180; 10.16.0000 through 10.16.1051; 10.17.0000 through 10.17.1021; 10.18.0001
CVE-2026-73772
6.5
0%
Sep 1
Unauthenticated Buffer Overflow Vulnerabilities lead to Denial-of-Service in AOS-CX
Affected: through 10.10.1180; 10.13.0000 through 10.13.1180; 10.16.0000 through 10.16.1051; 10.17.0000 through 10.17.1021; 10.18.0001
CVE-2026-73761
6.5
0%
Sep 1
Unauthenticated Out-of-Bounds Read Vulnerability leads to Information Disclosure in AOS-CX
Affected: through 10.10.1180; 10.13.0000 through 10.13.1180; 10.16.0000 through 10.16.1051; 10.17.0000 through 10.17.1021; 10.18.0001
CVE-2026-73760
6.5
1%
Sep 1
Authenticated Path Traversal Vulnerability Leads to Remote Unauthorized Access to Files in AOS-CX
Affected: through 10.10.1180; 10.13.0000 through 10.13.1180; 10.16.0000 through 10.16.1051; 10.17.0000 through 10.17.1021; 10.18.0001
CVE-2026-73759
6.5
0%
Sep 1
Unauthenticated Denial-of-Service Vulnerabilities in AOS-CX
Affected: before 10.10.1181; 10.13.0000 before 10.13.1190; 10.16.0000 before 10.16.1060; 10.17.0000 before 10.17.1030; 10.18.0001
CVE-2026-73758
6.5
0%
Sep 1
Authenticated Privilege Escalation Vulnerability via Broken Access Control in AOS-CX
Affected: through 10.10.1180; 10.13.0000 through 10.13.1180; 10.16.0000 through 10.16.1051; 10.17.0000 through 10.17.1021; 10.18.0001
CVE-2025-37160
6.5
0%
Nov 18
Authenticated Broken Access Control (BAC) in REST API Configuration Service
Affected: 10.10.0000 before 10.10.1170; 10.13.0000 before 10.13.1101; 10.14.0000 before 10.14.1060; 10.15.0000 before 10.15.1030; 10.16.0000 before 10.16.1001
CVE-2026-73757
6.4
0%
Sep 1
Authenticated Server-Side Request Forgery (SSRF) Leading to Information Disclosure in AOS-CX
Affected: through 10.10.1180; 10.13.0000 through 10.13.1180; 10.16.0000 through 10.16.1051; 10.17.0000 through 10.17.1021; 10.18.0001
CVE-2026-23817
6.1
0%
Mar 11
Unauthenticated Open Redirect allows URL Manipulation in Web Interface
Affected: 10.06.0000 before 10.10.1180; 10.13.0000 before 10.13.1161; 10.16.0000 before 10.16.1030; 10.17.0000 before 10.17.1001
CVE-2021-41003
6.1
1%
Mar 2
Multiple unauthenticated command injection vulnerabilities were discovered in the AOS-CX API interface in Aruba CX 6200F Switch Series, Aruba 6300 Switch Series, Aruba 6400 Switch…
Affected: 10.06.0001 through 10.06.0170; 10.07.0001 through 10.07.0050; 10.08.0001 through 10.08.1030; 10.09.0001 through 10.09.0002
CVE-2026-73756
5.9
0%
Sep 1
Unauthenticated Sensitive Information Disclosure via Man-in-the-Middle in AOS-CX via API Endpoint
Affected: through 10.10.1180; 10.13.0000 through 10.13.1180; 10.16.0000 through 10.16.1051; 10.17.0000 through 10.17.1021; 10.18.0001
CVE-2026-73755
5.7
0%
Sep 1
Privilege Escalation via Unauthorized Access to Sensitive Session Information
Affected: through 10.10.1180; 10.13.0000 through 10.13.1180; 10.16.0000 through 10.16.1051; 10.17.0000 through 10.17.1021; 10.18.0001
CVE-2026-73754
5.3
0%
Sep 1
Authenticated Denial-of-Service Vulnerabilities in the Command Line Interface of AOS-CX
Affected: through 10.10.1180; 10.13.0000 through 10.13.1180; 10.16.0000 through 10.16.1051; 10.17.0000 through 10.17.1021; 10.18.0001
CVE-2026-73783
4.9
0%
Sep 1
Authenticated Stack Overflow Vulnerabilities lead to Denial-of-Service in AOS-CX
Affected: through 10.10.1180; 10.13.0000 through 10.13.1180; 10.16.0000 through 10.16.1051; 10.17.0000 through 10.17.1021; 10.18.0001
Showing 15