Log in Start free

Vulnerability · Published Sep 1, 2026 · Assigned by hpe

CVE-2026-73771Improper Authentication Handling in AOS-CX Management Interface and API

High 7.5

In plain English

A high-severity improper authentication in AOS-CX from Hewlett Packard Enterprise (HPE). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 41% of all known vulnerabilities).

Severity (CVSS 3.1)7.5High
Exploit odds (30 days)0.5%top 59.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

An authentication vulnerability exists in the AOS-CX management interface and API that may allow improper authentication processing. An unauthenticated remote attacker could exploit this vulnerability under specific conditions to bypass authentication controls or exhaust system resources. Successful exploitation could result in unauthorized access or denial of service affecting the management interface.

Affected products (as reported)

VendorProductVersions
Hewlett Packard Enterprise (HPE) AOS-CX 10.18.0000 – through 10.18.000110.17.0000 – through 10.17.102110.16.0000 – through 10.16.105110.13.0000 – through 10.13.118010.10.0000 – through 10.10.1180

Weakness: CWE-287 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

References