Zero Day MonitorZDM
DashboardVulnerabilitiesTrendingZero-DaysNewsAbout
Login
ImpressumPrivacy Policy
Zero Day Monitor © 2026
6345 articles · 219796 vulns · 36/41 feeds (7d)
← Back to list
7.9
CVE-2026-73776
hewlett packard enterprise (hpe) · aos-cx

Authenticated Signature Verification Bypass Leading to Arbitrary Code Execution in AOS-CX

Description

A signature verification bypass vulnerability exists in the command line interface of AOS-CX. Successful exploitation could allow an authenticated malicious actor with administrative privileges to execute arbitrary code on the underlying operating system, when certain pre-conditions outside of the attacker’s control are met.

Affected Products

VendorProductVersions
hewlett packard enterprise (hpe)aos-cx10.18.0000, 10.17.0000, 10.16.0000, 10.13.0000, 10.10.0000

Also Affects

Downstream vendors/products affected by this vulnerability

VendorProductSourceConfidence
arubaarubaoscert_advisory90%

References

  • https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05134en_us&docLocale=en_US

Related News (3 articles)

Tier B
BSI Advisories18d ago
[NEU] [hoch] Aruba ArubaOS-CX: Mehrere Schwachstellen
→ No new info (linked only)
Tier B
CERT-FR18d ago
Multiples vulnérabilités dans les produits HPE Aruba Networking (02 septembre 2026)
→ No new info (linked only)
Tier C
VulDB18d ago
CVE-2026-73776 | HPE AOS-CX up to 10.18.0001 Command Line Interface signature verification
→ No new info (linked only)

Discussion (0)

Loading…

CVSS 3.17.9 HIGH
VectorCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N
CISA KEV❌ No
Actively exploited❌ No
PublishedSep 1, 2026
Trending Score7
Source articles3
Independent3
Info Completeness0/14
Missing: cve_id, title, description, vendor, product, versions, cvss, epss, cwe, kev, exploit, patch, iocs, mitre_attack

Community Vote

0
Login to vote
0 upvotes0 downvotes
No votes yet

Related CVEs (5)

CRITICALCVE-2026-76672
Authenticated Sensitive Information Disclosure in HPE Networking EdgeConnect SD-WAN Orchestrator
Trending: 29
MEDIUMCVE-2026-76706
Unauthenticated Information Disclosure in EdgeConnect SD-WAN Orchestrator API allows exposure of sensitive data
Trending: 27
MEDIUMCVE-2026-76695
Unauthenticated Buffer Overflow Vulnerabilities in HPE Networking EdgeConnect SD-WAN Gateways
Trending: 27
HIGHCVE-2026-76680
Authenticated Server-Side Request Forgery Vulnerabilities Leading to Information Disclosure in EdgeConnect SD-WAN Orchestrator
Trending: 26
HIGHCVE-2026-76688
Authentication Bypass Vulnerabilities in the Web-Based Management Interface of EdgeConnect SD-WAN Orchestrator
Trending: 26

Pin to Dashboard

Verification

State: unverified
Confidence: 0%

Vulnerability Timeline

CVE Published
Sep 1, 2026
Discovered by ZDM
Sep 1, 2026