CVE-2026-73773

Received Received - Intake

Unauthenticated DoS Vulnerability in HPE AOS-CX API

Publication date: 2026-09-01

Last updated on: 2026-09-01

Assigner: Hewlett Packard Enterprise (HPE)

Description

An unauthenticated Denial-of-Service (DoS) vulnerability exists in the API endpoint of AOS-CX. Successful exploitation of this vulnerability results in the ability to interrupt the normal operation of the affected service.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-01

Last Modified

2026-09-01

Generated

2026-09-02

AI Q&A

2026-09-02

EPSS Evaluated

N/A

NVD

CVE-2026-73773

Affected Vendors & Products

Vendor	Product	Version / Range
hpe	aos-cx	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This is an unauthenticated Denial-of-Service (DoS) vulnerability in the API endpoint of HPE's AOS-CX. It allows attackers to disrupt the normal operation of the service without needing any authentication.

Impact Analysis

Exploitation could cause service outages, making the affected system unavailable to legitimate users. This may lead to downtime, loss of productivity, and potential financial or operational disruptions.

Compliance Impact

This vulnerability could potentially impact compliance with GDPR and HIPAA by disrupting the availability of critical services. GDPR requires maintaining data processing availability, while HIPAA mandates continuous access to protected health information systems. A DoS attack may lead to service interruptions, affecting compliance with these regulations.

Mitigation Strategies

Apply vendor patches or updates for AOS-CX immediately. Monitor network traffic for unusual API endpoint activity. Restrict access to the API endpoint if possible until patched.

Hi! I’m here to help you understand CVE-2026-73773. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70