CVE-2026-73754

Analyzed Analyzed - Analysis Complete

Denial-of-Service in HPE AOS-CX CLI

Publication date: 2026-09-01

Last updated on: 2026-09-04

Assigner: Hewlett Packard Enterprise (HPE)

Description

Denial-of-service vulnerabilities exist in the command line interface of AOS-CX. Successful exploitation could allow an authenticated user to disrupt the normal operation of a vulnerable system.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-01

Last Modified

2026-09-04

Generated

2026-09-10

AI Q&A

2026-09-02

EPSS Evaluated

2026-09-09

NVD

CVE-2026-73754

Affected Vendors & Products

Vendor	Product	Version / Range
hpe	arubaos-cx	From 10.13.0000 (inc) to 10.13.1180 (inc)
hpe	arubaos-cx	to 10.10.1180 (inc)
hpe	arubaos-cx	From 10.16.0000 (inc) to 10.16.1051 (inc)
hpe	arubaos-cx	From 10.17.0000 (inc) to 10.17.1021 (inc)
hpe	arubaos-cx	10.18.0001

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-400	The product does not properly control the allocation and maintenance of a limited resource.

Attack-Flow Graph

Executive Summary

This vulnerability is a denial-of-service issue in the command line interface of AOS-CX. An authenticated user could exploit it to disrupt the normal operation of a vulnerable system.

Detection Guidance

Detection requires monitoring for unusual command line interface activity in AOS-CX systems. Check for repeated failed authentication attempts or unexpected command executions that could indicate exploitation attempts. Review system logs for signs of service disruption or abnormal resource usage.

Impact Analysis

If exploited, this vulnerability could cause system outages or degraded performance, affecting network operations and availability for users relying on the AOS-CX system.

Compliance Impact

The vulnerability is a denial-of-service issue in AOS-CX's command line interface that could disrupt system operations. This type of disruption may impact compliance with standards requiring system availability, such as GDPR's data integrity requirements or HIPAA's access controls, by potentially causing service unavailability.

Mitigation Strategies

Apply vendor patches or updates for AOS-CX as soon as they become available. Restrict access to the command line interface to trusted users only. Monitor system logs for unusual activity related to CLI commands.

Hi! I’m here to help you understand CVE-2026-73754. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70