CVE-2026-73761

Analyzed Analyzed - Analysis Complete

Out-of-Bounds Read in HPE ArubaOS-CX

Publication date: 2026-09-01

Last updated on: 2026-09-04

Assigner: Hewlett Packard Enterprise (HPE)

Description

An out-of-bounds read vulnerability exists in the underlying operating system of AOS-CX that could lead to unauthenticated information disclosure by sending a specially crafted packet. Successful exploitation of this vulnerability results in the ability to disclose sensitive information from the underlying operating system.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-01

Last Modified

2026-09-04

Generated

2026-09-10

AI Q&A

2026-09-02

EPSS Evaluated

2026-09-09

NVD

CVE-2026-73761

Affected Vendors & Products

Vendor	Product	Version / Range
hpe	arubaos-cx	From 10.13.0000 (inc) to 10.13.1180 (inc)
hpe	arubaos-cx	to 10.10.1180 (inc)
hpe	arubaos-cx	From 10.16.0000 (inc) to 10.16.1051 (inc)
hpe	arubaos-cx	From 10.17.0000 (inc) to 10.17.1021 (inc)
hpe	arubaos-cx	10.18.0001

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-125	The product reads data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

Executive Summary

This is an out-of-bounds read vulnerability in the operating system of AOS-CX. It allows unauthenticated attackers to send specially crafted packets to disclose sensitive information from the underlying operating system.

Detection Guidance

Detection of this vulnerability requires monitoring network traffic for malformed packets targeting AOS-CX systems. Inspect logs for unusual information disclosure events or crashes in AOS-CX devices. No specific commands are provided in the available context.

Impact Analysis

An attacker could exploit this to access sensitive data stored on affected systems, potentially leading to unauthorized information disclosure. The impact includes loss of confidentiality for critical system data.

Compliance Impact

This vulnerability could lead to unauthorized data exposure, violating compliance requirements for data protection such as GDPR or HIPAA. Organizations may face penalties due to compromised sensitive information.

Mitigation Strategies

Apply the latest security patches or updates provided by HPE for AOS-CX to address the out-of-bounds read vulnerability. Monitor HPE's security advisories for patches and follow their recommended mitigation steps.

Hi! I’m here to help you understand CVE-2026-73761. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70