CVE-2026-73783

Received Received - Intake

Buffer Overflow in HPE ArubaOS-CX API

Publication date: 2026-09-01

Last updated on: 2026-09-01

Assigner: Hewlett Packard Enterprise (HPE)

Description

Stack overflow vulnerabilities exist in an API endpoint of AOS-CX. Successful exploitation could allow an authenticated malicious actor to cause a denial-of-service condition on the affected system.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-01

Last Modified

2026-09-01

Generated

2026-09-02

AI Q&A

2026-09-02

EPSS Evaluated

N/A

NVD

CVE-2026-73783

Affected Vendors & Products

Vendor	Product	Version / Range
hpe	aos-cx	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability is a stack overflow in an API endpoint of AOS-CX. It allows an authenticated attacker to cause a denial-of-service condition by exploiting a flaw that overwrites the call stack, leading to system instability or crash.

Impact Analysis

The impact includes service disruption due to system crashes or unresponsiveness. Since it requires authentication, only users with access to the API endpoint can exploit it. The denial-of-service may affect network services or applications relying on the affected system.

Compliance Impact

This vulnerability causes a denial-of-service condition due to a stack overflow in an API endpoint. It does not directly impact data confidentiality or integrity but may disrupt system availability, which could affect compliance with standards requiring high availability like HIPAA for healthcare systems.

Mitigation Strategies

Apply the latest security patches or updates provided by HPE for AOS-CX to address the stack overflow vulnerability in the API endpoint.

Hi! I’m here to help you understand CVE-2026-73783. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70