CVE-2026-73764

Analyzed Analyzed - Analysis Complete

Authentication Bypass in HPE ArubaOS-CX Switches

Publication date: 2026-09-01

Last updated on: 2026-09-04

Assigner: Hewlett Packard Enterprise (HPE)

Description

Vulnerabilities have been identified in the operating system of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. In some cases this could enable unauthorized modification of affected resources and limited disruption of affected services.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-01

Last Modified

2026-09-04

Generated

2026-09-13

AI Q&A

2026-09-02

EPSS Evaluated

2026-09-12

NVD

CVE-2026-73764

Affected Vendors & Products

Vendor	Product	Version / Range
hpe	arubaos-cx	From 10.13.0000 (inc) to 10.13.1180 (inc)
hpe	arubaos-cx	to 10.10.1180 (inc)
hpe	arubaos-cx	From 10.16.0000 (inc) to 10.16.1051 (inc)
hpe	arubaos-cx	From 10.17.0000 (inc) to 10.17.1021 (inc)
hpe	arubaos-cx	10.18.0001

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-287	When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

Attack-Flow Graph

Executive Summary

This vulnerability affects AOS-CX switches and allows an unauthenticated remote attacker to bypass authentication controls. This could lead to unauthorized changes to system resources and limited service disruptions.

Impact Analysis

An attacker could gain unauthorized access to modify system settings or disrupt services on affected AOS-CX switches. This may lead to network instability or unauthorized control of network devices.

Compliance Impact

This vulnerability could allow unauthorized modification of resources and limited service disruption, which may lead to unauthorized access or data tampering. Such risks could impact compliance with GDPR (data integrity and security requirements) and HIPAA (integrity and availability of protected health information).

Mitigation Strategies

Apply the latest security patches provided by HPE for AOS-CX switches to address authentication bypass issues. Isolate affected systems from untrusted networks until patched. Monitor network traffic for unusual activity targeting switch authentication mechanisms.

Hi! I’m here to help you understand CVE-2026-73764. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70