CVE-2026-73783

Analyzed Analyzed - Analysis Complete

Buffer Overflow in HPE ArubaOS-CX API

Publication date: 2026-09-01

Last updated on: 2026-09-04

Assigner: Hewlett Packard Enterprise (HPE)

Description

Stack overflow vulnerabilities exist in an API endpoint of AOS-CX. Successful exploitation could allow an authenticated malicious actor to cause a denial-of-service condition on the affected system.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-01

Last Modified

2026-09-04

Generated

2026-09-15

AI Q&A

2026-09-02

EPSS Evaluated

2026-09-14

NVD

CVE-2026-73783

Affected Vendors & Products

Vendor	Product	Version / Range
hpe	arubaos-cx	From 10.13.0000 (inc) to 10.13.1180 (inc)
hpe	arubaos-cx	to 10.10.1180 (inc)
hpe	arubaos-cx	From 10.16.0000 (inc) to 10.16.1051 (inc)
hpe	arubaos-cx	From 10.17.0000 (inc) to 10.17.1021 (inc)
hpe	arubaos-cx	10.18.0001

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-121	A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

Attack-Flow Graph

Executive Summary

This vulnerability is a stack overflow in an API endpoint of AOS-CX. It allows an authenticated attacker to cause a denial-of-service condition by exploiting a flaw that overwrites the call stack, leading to system instability or crash.

Detection Guidance

Detection of this stack overflow vulnerability in AOS-CX requires monitoring for abnormal API endpoint behavior or system crashes. Check logs for API endpoint errors or segmentation faults. Use network monitoring tools to detect unusual traffic patterns targeting the affected API. No specific commands are provided in the context.

Impact Analysis

The impact includes service disruption due to system crashes or unresponsiveness. Since it requires authentication, only users with access to the API endpoint can exploit it. The denial-of-service may affect network services or applications relying on the affected system.

Compliance Impact

This vulnerability causes a denial-of-service condition due to a stack overflow in an API endpoint. It does not directly impact data confidentiality or integrity but may disrupt system availability, which could affect compliance with standards requiring high availability like HIPAA for healthcare systems.

Mitigation Strategies

Apply the latest security patches or updates provided by HPE for AOS-CX to address the stack overflow vulnerability in the API endpoint.

Hi! I’m here to help you understand CVE-2026-73783. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70