CVE-2026-73768

Analyzed Analyzed - Analysis Complete

Improper Input Handling in AOS-CX CLI Leads to Root Command Execution

Publication date: 2026-09-01

Last updated on: 2026-09-04

Assigner: Hewlett Packard Enterprise (HPE)

Description

A vulnerability exists in the command line interface of AOS-CX that may allow for improper processing of malformed input. Successful exploitation could result in the execution of arbitrary commands with root privileges.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-01

Last Modified

2026-09-04

Generated

2026-09-10

AI Q&A

2026-09-02

EPSS Evaluated

2026-09-09

NVD

CVE-2026-73768

Affected Vendors & Products

Vendor	Product	Version / Range
hpe	arubaos-cx	From 10.13.0000 (inc) to 10.13.1180 (inc)
hpe	arubaos-cx	to 10.10.1180 (inc)
hpe	arubaos-cx	From 10.16.0000 (inc) to 10.16.1051 (inc)
hpe	arubaos-cx	From 10.17.0000 (inc) to 10.17.1021 (inc)
hpe	arubaos-cx	10.18.0001

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-20	The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Attack-Flow Graph

Executive Summary

This vulnerability is in the command line interface of AOS-CX where malformed input may not be processed correctly. If exploited, it could allow attackers to run arbitrary commands with root privileges on the system.

Impact Analysis

An attacker could gain full control of the affected system by executing malicious commands as the root user. This could lead to data theft, system damage, or unauthorized access to sensitive information.

Compliance Impact

The vulnerability allows arbitrary command execution with root privileges, which could lead to unauthorized access or data breaches. This may impact compliance with standards like GDPR (data protection) and HIPAA (healthcare data) by enabling unauthorized data access or modification.

Mitigation Strategies

Apply patches or updates from HPE for AOS-CX to address the improper input processing flaw. Restrict CLI access to trusted users only and monitor for unusual command execution patterns.

Hi! I’m here to help you understand CVE-2026-73768. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70