CVE-2026-73755

published 2026-09-01

CVE-2026-73755: A privilege escalation vulnerability exists in the API endpoint of AOS-CX. Successful exploitation could allow an authenticated low-privilege operator user…

Priority P4 33 medium 5.7 CVSS 3.1

AV N AC L PR L UI R S U C H I N A N

A privilege escalation vulnerability exists in the API endpoint of AOS-CX. Successful exploitation could allow an authenticated low-privilege operator user, after a required user action, to access sensitive information from the vulnerable system.

Affected

10 ranges

Vendor	Product	Version range	Fixed in
hewlett_packard_enterprise	aos-cx	10.10.0000 – 10.10.1180	—
hewlett_packard_enterprise	aos-cx	10.13.0000 – 10.13.1180	—
hewlett_packard_enterprise	aos-cx	10.16.0000 – 10.16.1051	—
hewlett_packard_enterprise	aos-cx	10.17.0000 – 10.17.1021	—
hewlett_packard_enterprise	aos-cx	10.18.0000 – 10.18.0001	—
hpe	arubaos-cx	<= 10.10.1180	—
hpe	arubaos-cx	—	—
hpe	arubaos-cx	10.13.0000 – 10.13.1180	—
hpe	arubaos-cx	10.16.0000 – 10.16.1051	—
hpe	arubaos-cx	10.17.0000 – 10.17.1021	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-269