Hewlett Packard Enterprise (HPE) AOS-CX
46 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-73783 | 10.18.0000 – 10.18.0001 ; 10.17.0000 – 10.17.1021 ; 10.16.0000 – 10.16.1051 ; … | Authenticated Stack Overflow Vulnerabilities lead to Denial-of-Service in AOS-CX | MEDIUM 4.9 | 0.4 % | ||
| CVE-2026-73782 | 10.18.0000 – 10.18.0001 ; 10.17.0000 – 10.17.1021 ; 10.16.0000 – 10.16.1051 ; … | Unauthenticated Format String Vulnerability leads to Remote Code Execution in AOS-CX | HIGH 8.8 | 0.4 % | ||
| CVE-2026-73781 | 10.18.0000 – 10.18.0001 ; 10.17.0000 – 10.17.1021 ; 10.16.0000 – 10.16.1051 ; … | Authenticated Stored Cross-Site Scripting Vulnerability (XSS) in AOS-CX Web-Based Management Interface | HIGH 8.4 | 0.5 % | ||
| CVE-2026-73780 | 10.18.0000 – 10.18.0001 ; 10.17.0000 – 10.17.1021 ; 10.16.0000 – 10.16.1051 ; … | Lack of Cross-Site Request Forgery (CSRF) Protections for Certificate-Authenticated Sessions in AOS-CX | HIGH 8.3 | 0.2 % | ||
| CVE-2026-73779 | 10.18.0000 – 10.18.0001 ; 10.17.0000 – 10.17.1021 ; 10.16.0000 – 10.16.1051 ; … | Authentication Bypass Vulnerabilities Leading to Information Disclosure, Unauthorized Modification, and Service Disruption in AOS-CX | HIGH 8.2 | 0.2 % | ||
| CVE-2026-73778 | 10.18.0000 – 10.18.0001 ; 10.17.0000 – 10.17.1021 ; 10.16.0000 – 10.16.1051 ; … | Credential Manager Vulnerability Allows Unauthorized Administrative Access | CRITICAL 9.8 | 0.5 % | ||
| CVE-2026-73777 | 10.18.0000 – 10.18.0001 ; 10.17.0000 – 10.17.1021 ; 10.16.0000 – 10.16.1051 ; … | Authorization Bypass Vulnerabilities Leading to Privilege Escalation in AOS-CX API Endpoint | HIGH 8.1 | 0.5 % | ||
| CVE-2026-73776 | 10.18.0000 – 10.18.0001 ; 10.17.0000 – 10.17.1021 ; 10.16.0000 – 10.16.1051 ; … | Authenticated Signature Verification Bypass Leading to Arbitrary Code Execution in AOS-CX | HIGH 7.9 | 0.1 % | ||
| CVE-2026-73775 | 10.18.0000 – 10.18.0001 ; 10.17.0000 – 10.17.1021 ; 10.16.0000 – 10.16.1051 ; … | Authenticated Sensitive Information Disclosure Vulnerabilities in AOS-CX | HIGH 7.7 | 0.5 % | ||
| CVE-2026-73774 | 10.18.0000 – 10.18.0001 ; 10.17.0000 – 10.17.1021 ; 10.16.0000 – 10.16.1051 ; … | Unauthenticated Buffer Overflow Vulnerability leads to Sensitive Information Disclosure in AOS-CX | HIGH 7.6 | 0.3 % | ||
| CVE-2026-73773 | 10.18.0000 – 10.18.0001 ; 10.17.0000 – 10.17.1021 ; 10.16.0000 – 10.16.1051 ; … | Unauthenticated Denial-of-Service (DoS) Vulnerability in AOS-CX | HIGH 7.5 | 0.5 % | ||
| CVE-2026-73772 | 10.18.0000 – 10.18.0001 ; 10.17.0000 – 10.17.1021 ; 10.16.0000 – 10.16.1051 ; … | Unauthenticated Buffer Overflow Vulnerabilities lead to Denial-of-Service in AOS-CX | MEDIUM 6.5 | 0.3 % | ||
| CVE-2026-73771 | 10.18.0000 – 10.18.0001 ; 10.17.0000 – 10.17.1021 ; 10.16.0000 – 10.16.1051 ; … | Improper Authentication Handling in AOS-CX Management Interface and API | HIGH 7.5 | 0.5 % | ||
| CVE-2026-73770 | 10.18.0000 – 10.18.0001 ; 10.17.0000 – 10.17.1021 ; 10.16.0000 – 10.16.1051 ; … | Authenticated Arbitrary File Write Vulnerability Leading to Remote Code Execution in AOS-CX | HIGH 7.3 | 0.2 % | ||
| CVE-2026-73768 | 10.18.0000 – 10.18.0001 ; 10.17.0000 – 10.17.1021 ; 10.16.0000 – 10.16.1051 ; … | Local Privilege Escalation in AOS-CX Command Line Interface | HIGH 7.3 | 0.2 % | ||
| CVE-2026-73767 | 10.18.0000 – 10.18.0001 ; 10.17.0000 – 10.17.1021 ; 10.16.0000 – 10.16.1051 ; … | Authenticated Remote Command Injection Vulnerabilities in AOS-CX Command Line Interface | HIGH 7.2 | 1.7 % | ||
| CVE-2026-73766 | 10.18.0000 – 10.18.0001 ; 10.17.0000 – 10.17.1021 ; 10.16.0000 – 10.16.1051 ; … | Authenticated Command Injection Vulnerabilities in the API Endpoint of AOS-CX | HIGH 7.2 | 1.5 % | ||
| CVE-2026-73765 | 10.18.0000 – 10.18.0001 ; 10.17.0000 – 10.17.1021 ; 10.16.0000 – 10.16.1051 ; … | Authenticated Path Traversal Vulnerabilities Lead to Remote Code Execution in AOS-CX | HIGH 7.2 | 0.9 % | ||
| CVE-2026-73764 | 10.18.0000 – 10.18.0001 ; 10.17.0000 – 10.17.1021 ; 10.16.0000 – 10.16.1051 ; … | Authentication Bypass Vulnerabilities Leading to Unauthorized Modification and Service Disruption in AOS-CX | HIGH 7.1 | 0.3 % | ||
| CVE-2026-73763 | 10.18.0000 – 10.18.0001 ; 10.17.0000 – 10.17.1021 ; 10.16.0000 – 10.16.1051 ; … | Unauthenticated Remote Command Execution in Management Component | HIGH 8.8 | 0.5 % | ||
| CVE-2026-73762 | 10.18.0000 – 10.18.0001 ; 10.17.0000 – 10.17.1021 ; 10.16.0000 – 10.16.1051 ; … | Authorization Bypass in the API Endpoint of AOS-CX Leads to Unauthorized Access | MEDIUM 6.6 | 0.3 % | ||
| CVE-2026-73761 | 10.18.0000 – 10.18.0001 ; 10.17.0000 – 10.17.1021 ; 10.16.0000 – 10.16.1051 ; … | Unauthenticated Out-of-Bounds Read Vulnerability leads to Information Disclosure in AOS-CX | MEDIUM 6.5 | 0.3 % | ||
| CVE-2026-73760 | 10.18.0000 – 10.18.0001 ; 10.17.0000 – 10.17.1021 ; 10.16.0000 – 10.16.1051 ; … | Authenticated Path Traversal Vulnerability Leads to Remote Unauthorized Access to Files in AOS-CX | MEDIUM 6.5 | 0.6 % | ||
| CVE-2026-73759 | 10.18.0000 – 10.18.0001 ; 10.17.0000 – 10.17.1021 ; 10.16.0000 – 10.16.1051 ; … | Unauthenticated Denial-of-Service Vulnerabilities in AOS-CX | MEDIUM 6.5 | 0.3 % | ||
| CVE-2026-73758 | 10.18.0000 – 10.18.0001 ; 10.17.0000 – 10.17.1021 ; 10.16.0000 – 10.16.1051 ; … | Authenticated Privilege Escalation Vulnerability via Broken Access Control in AOS-CX | MEDIUM 6.5 | 0.3 % | ||
| CVE-2026-73757 | 10.18.0000 – 10.18.0001 ; 10.17.0000 – 10.17.1021 ; 10.16.0000 – 10.16.1051 ; … | Authenticated Server-Side Request Forgery (SSRF) Leading to Information Disclosure in AOS-CX | MEDIUM 6.4 | 0.3 % | ||
| CVE-2026-73756 | 10.18.0000 – 10.18.0001 ; 10.17.0000 – 10.17.1021 ; 10.16.0000 – 10.16.1051 ; … | Unauthenticated Sensitive Information Disclosure via Man-in-the-Middle in AOS-CX via API Endpoint | MEDIUM 5.9 | 0.3 % | ||
| CVE-2026-73755 | 10.18.0000 – 10.18.0001 ; 10.17.0000 – 10.17.1021 ; 10.16.0000 – 10.16.1051 ; … | Privilege Escalation via Unauthorized Access to Sensitive Session Information | MEDIUM 5.7 | 0.3 % | ||
| CVE-2026-73754 | 10.18.0000 – 10.18.0001 ; 10.17.0000 – 10.17.1021 ; 10.16.0000 – 10.16.1051 ; … | Authenticated Denial-of-Service Vulnerabilities in the Command Line Interface of AOS-CX | MEDIUM 5.3 | 0.3 % | ||
| CVE-2026-73753 | 10.18.0000 – 10.18.0001 ; 10.17.0000 – 10.17.1021 ; 10.16.0000 – 10.16.1051 ; … | Authenticated Remote Command Injection Vulnerabilities in AOS-CX Command Line Interface | HIGH 8.8 | 0.7 % | ||
| CVE-2026-73752 | 10.18.0000 – 10.18.0001 ; 10.17.0000 – 10.17.1021 ; 10.16.0000 – 10.16.1051 ; … | Unauthenticated Arbitrary File Write Vulnerability Leads to Remote Code Execution in AOS-CX | HIGH 8.8 | 0.5 % | ||
| CVE-2026-73751 | 10.18.0000 – 10.18.0001 ; 10.17.0000 – 10.17.1021 ; 10.16.0000 – 10.16.1051 ; … | Authenticated Remote Command Injection in AOS-CX Web-based Management Interface | HIGH 8.8 | 0.7 % | ||
| CVE-2026-73750 | 10.18.0000 – 10.18.0001 ; 10.17.0000 – 10.17.1021 ; 10.16.0000 – 10.16.1051 ; … | Authenticated Buffer Overflow Vulnerabilities in AOS-CX API Endpoint Leads to Possible Code Execution | HIGH 8.8 | 0.8 % | ||
| CVE-2026-73749 | 10.18.0000 – 10.18.0001 ; 10.17.0000 – 10.17.1021 ; 10.16.0000 – 10.16.1051 ; … | Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-CX | CRITICAL 9.8 | 0.8 % | ||
| CVE-2026-63454 | 10.17.0000 – 10.17.1020 ; 10.16.0000 – 10.16.1050 ; 10.13.0000 – 10.13.1180 ; … | Authenticated Path Traversal Vulnerability Leads to Remote Code Execution in AOS-CX | HIGH 7.2 | 0.9 % | ||
| CVE-2026-63453 | 10.17.0000 – 10.17.1020 ; 10.16.0000 – 10.16.1050 ; 10.13.0000 – 10.13.1170 ; … | Authenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-CX | HIGH 7.2 | 0.6 % | ||
| CVE-2026-44880 | 10.17.0000 – 10.17.1020 ; 10.16.0000 – 10.16.1050 ; 10.13.0000 – 10.13.1170 ; … | Low-Privilege Authenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-CX | HIGH 8.8 | 0.8 % | ||
| CVE-2026-23817 | 10.17.0000 – 10.17.0001 ; 10.16.0000 – 10.16.1020 ; 10.13.0000 – 10.13.1101 ; … | Unauthenticated Open Redirect allows URL Manipulation in Web Interface | MEDIUM 6.5 | 0.3 % | ||
| CVE-2026-23816 | 10.17.0000 – 10.17.0001 ; 10.16.0000 – 10.16.1020 ; 10.13.0000 – 10.13.1101 ; … | Authenticated Command Injection found in admin AOS-CX CLI command | HIGH 8.8 | 1.3 % | ||
| CVE-2026-23815 | 10.17.0000 – 10.17.0001 ; 10.16.0000 – 10.16.1020 ; 10.13.0000 – 10.13.1101 ; … | Authenticated Command Injection found in AOS-CX Administrative CLI Command | HIGH 7.2 | 1.0 % | ||
| CVE-2026-23814 | 10.17.0000 – 10.17.0001 ; 10.16.0000 – 10.16.1020 ; 10.13.0000 – 10.13.1101 ; … | Authenticated Command Injection found in AOS-CX CLI Command | HIGH 8.8 | 0.6 % | ||
| CVE-2026-23813 | 10.17.0000 – 10.17.0001 ; 10.16.0000 – 10.16.1020 ; 10.13.0000 – 10.13.1160 ; … | Authentication Bypass in Web Interface allows Unauthenticated Admin Password Reset | CRITICAL 9.8 | 0.8 % | ||
| CVE-2025-27080 | 10.10.0000 – <=10.10.1140 ; 10.13.0000 – <=10.13.1070 ; 10.14.0000 – <=10.14.1030 ; … | Authenticated Sensitive Information Disclosure exposes Credentials in AOS-CX Command Line Interface | MEDIUM 6.0 | 0.2 % | ||
| CVE-2025-25042 | 10.10.0000 – <=10.10.1140 ; 10.13.0000 – <=10.13.1070 ; 10.14.0000 – <=10.14.1030 ; … | Authenticated Access Control Vulnerability allows Sensitive Information Disclosure in AOS-CX REST Interface | MEDIUM 4.3 | 0.3 % | ||
| CVE-2025-25040 | 10.14.0000 – <=10.14.1040 ; 10.15.0000 – <=10.15.1000 | Failure to Properly Enforce Port ACLs on CPU generated packets in CX 9300 Switches | LOW 3.3 | 0.1 % | ||
| CVE-2024-54010 | Version 10.10.0000: 10.10.1140 and below – <=10.10.1140 ; Version 10.13.0000: 10.13.1060 and below – <=10.13.1060 ; Version 10.14.0000: 10.14.1020 and below – <=10.14.1020 ; … | Unauthenticated Traffic Handling Flaw Allows Packet Leakage on HPE Aruba Networking CX 10000 series switches | LOW 3.4 | 0.2 % |