CVE-2026-73779

Analyzed Analyzed - Analysis Complete

Authentication Bypass in HPE ArubaOS-CX Switches

Publication date: 2026-09-01

Last updated on: 2026-09-03

Assigner: Hewlett Packard Enterprise (HPE)

Description

Vulnerabilities have been identified in the operating system of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. Successful exploitation could compromise system integrity and further expose sensitive information.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-01

Last Modified

2026-09-03

Generated

2026-09-05

AI Q&A

2026-09-02

EPSS Evaluated

2026-09-03

NVD

CVE-2026-73779

Affected Vendors & Products

Vendor	Product	Version / Range
hpe	arubaos-cx	From 10.13.0000 (inc) to 10.13.1180 (inc)
hpe	arubaos-cx	to 10.10.1180 (inc)
hpe	arubaos-cx	From 10.16.0000 (inc) to 10.16.1051 (inc)
hpe	arubaos-cx	From 10.17.0000 (inc) to 10.17.1021 (inc)
hpe	arubaos-cx	10.18.0001

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-269	The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

Attack-Flow Graph

Executive Summary

This vulnerability affects HPE AOS-CX switches. It allows an unauthenticated remote attacker to bypass authentication controls, potentially gaining unauthorized access to the system. Exploitation could lead to system integrity compromise and exposure of sensitive information.

Detection Guidance

Detection methods are not provided in the available CVE context. Check HPE's official advisories for AOS-CX switches for specific detection steps or tools.

Impact Analysis

If exploited, this vulnerability could allow attackers to take control of affected AOS-CX switches, leading to unauthorized access, data breaches, or further network compromise. It may result in loss of system integrity and sensitive data exposure.

Compliance Impact

This vulnerability could lead to non-compliance with GDPR, HIPAA, and other regulations due to unauthorized access and data exposure risks. It may result in legal penalties, loss of trust, and failure to meet data protection requirements.

Mitigation Strategies

Apply vendor-provided patches or updates for AOS-CX switches immediately. Isolate affected systems from untrusted networks. Review and enforce strict authentication controls. Monitor network traffic for unusual activity.

Hi! I’m here to help you understand CVE-2026-73779. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70