CVE-2026-73749: hpe arubaos-cx

CVSS 9.8 (critical) · published 2026-09-01

Multiple vulnerabilities exist in a daemon of AOS-CX that may allow for improper processing of malformed input. An unauthenticated remote attacker could exploit these vulnerabilities by sending specially crafted packets to the affected service. Successful exploitation could result in remote code execution with elevated privileges.

Affected products (NVD): hpe arubaos-cx

Fixed in (NVD): 10.10.1181, 10.13.1190, 10.16.1060, 10.17.1030

Weakness: CWE-284

Source: NVD CVE-2026-73749

References

• https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05134en_us&docLocale=en_US

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.