# Hewlett Packard Enterprise (HPE) AOS-CX. Every CVE that names Hewlett Packard Enterprise (HPE) AOS-CX among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first - [Authenticated Stack Overflow Vulnerabilities lead to Denial-of-Service in AOS-CX](https://agentprime.io/advisories/CVE-2026-73783.md) `CVE-2026-73783` · CVE record: Hewlett Packard Enterprise (HPE) AOS-CX · CVSS 4.9 Medium · Not analysed yet · Published 1 Sept 2026 · Tags: Memory corruption - [Unauthenticated Format String Vulnerability leads to Remote Code Execution in AOS-CX](https://agentprime.io/advisories/CVE-2026-73782.md) `CVE-2026-73782` · CVE record: Hewlett Packard Enterprise (HPE) AOS-CX · CVSS 8.8 High · Not analysed yet · Published 1 Sept 2026 · Tags: Memory corruption - [Authenticated Stored Cross-Site Scripting Vulnerability (XSS) in AOS-CX Web-Based Management Interface](https://agentprime.io/advisories/CVE-2026-73781.md) `CVE-2026-73781` · CVE record: Hewlett Packard Enterprise (HPE) AOS-CX · CVSS 8.4 High · Not analysed yet · Published 1 Sept 2026 · Tags: Cross-site scripting (XSS) - [Lack of Cross-Site Request Forgery (CSRF) Protections for Certificate-Authenticated Sessions in AOS-CX](https://agentprime.io/advisories/CVE-2026-73780.md) `CVE-2026-73780` · CVE record: Hewlett Packard Enterprise (HPE) AOS-CX · CVSS 8.3 High · Not analysed yet · Published 1 Sept 2026 · Tags: Cross-site request forgery (CSRF) - [Authentication Bypass Vulnerabilities Leading to Information Disclosure, Unauthorized Modification, and Service Disruption in AOS-CX](https://agentprime.io/advisories/CVE-2026-73779.md) `CVE-2026-73779` · CVE record: Hewlett Packard Enterprise (HPE) AOS-CX · CVSS 8.2 High · Not analysed yet · Published 1 Sept 2026 · Tags: Privilege escalation - [Credential Manager Vulnerability Allows Unauthorized Administrative Access](https://agentprime.io/advisories/CVE-2026-73778.md) `CVE-2026-73778` · CVE record: Hewlett Packard Enterprise (HPE) AOS-CX · CVSS 8.1 High · Not analysed yet · Published 1 Sept 2026 · Tags: Hard-coded credentials - [Authorization Bypass Vulnerabilities Leading to Privilege Escalation in AOS-CX API Endpoint](https://agentprime.io/advisories/CVE-2026-73777.md) `CVE-2026-73777` · CVE record: Hewlett Packard Enterprise (HPE) AOS-CX · CVSS 8.1 High · Not analysed yet · Published 1 Sept 2026 · Tags: Authentication bypass - [Authenticated Signature Verification Bypass Leading to Arbitrary Code Execution in AOS-CX](https://agentprime.io/advisories/CVE-2026-73776.md) `CVE-2026-73776` · CVE record: Hewlett Packard Enterprise (HPE) AOS-CX · CVSS 7.9 High · Not analysed yet · Published 1 Sept 2026 · Tags: Weak cryptography or TLS - [Authenticated Sensitive Information Disclosure Vulnerabilities in AOS-CX](https://agentprime.io/advisories/CVE-2026-73775.md) `CVE-2026-73775` · CVE record: Hewlett Packard Enterprise (HPE) AOS-CX · CVSS 7.7 High · Not analysed yet · Published 1 Sept 2026 · Tags: Information disclosure - [Unauthenticated Buffer Overflow Vulnerability leads to Sensitive Information Disclosure in AOS-CX](https://agentprime.io/advisories/CVE-2026-73774.md) `CVE-2026-73774` · CVE record: Hewlett Packard Enterprise (HPE) AOS-CX · CVSS 7.6 High · Not analysed yet · Published 1 Sept 2026 · Tags: Memory corruption - [Unauthenticated Denial-of-Service (DoS) Vulnerability in AOS-CX](https://agentprime.io/advisories/CVE-2026-73773.md) `CVE-2026-73773` · CVE record: Hewlett Packard Enterprise (HPE) AOS-CX · CVSS 7.5 High · Not analysed yet · Published 1 Sept 2026 · Tags: Denial of service - [Unauthenticated Buffer Overflow Vulnerabilities lead to Denial-of-Service in AOS-CX](https://agentprime.io/advisories/CVE-2026-73772.md) `CVE-2026-73772` · CVE record: Hewlett Packard Enterprise (HPE) AOS-CX · CVSS 6.5 Medium · Not analysed yet · Published 1 Sept 2026 · Tags: Memory corruption - [Improper Authentication Handling in AOS-CX Management Interface and API](https://agentprime.io/advisories/CVE-2026-73771.md) `CVE-2026-73771` · CVE record: Hewlett Packard Enterprise (HPE) AOS-CX · CVSS 7.5 High · Not analysed yet · Published 1 Sept 2026 · Tags: Authentication bypass - [Authenticated Arbitrary File Write Vulnerability Leading to Remote Code Execution in AOS-CX](https://agentprime.io/advisories/CVE-2026-73770.md) `CVE-2026-73770` · CVE record: Hewlett Packard Enterprise (HPE) AOS-CX · CVSS 7.3 High · Not analysed yet · Published 1 Sept 2026 · Tags: Path traversal - [Local Privilege Escalation in AOS-CX Command Line Interface](https://agentprime.io/advisories/CVE-2026-73768.md) `CVE-2026-73768` · CVE record: Hewlett Packard Enterprise (HPE) AOS-CX · CVSS 7.3 High · Not analysed yet · Published 1 Sept 2026 · Tags: CWE-20 - [Authenticated Remote Command Injection Vulnerabilities in AOS-CX Command Line Interface](https://agentprime.io/advisories/CVE-2026-73767.md) `CVE-2026-73767` · CVE record: Hewlett Packard Enterprise (HPE) AOS-CX · CVSS 7.2 High · Not analysed yet · Published 1 Sept 2026 · Tags: Command injection - [Authenticated Command Injection Vulnerabilities in the API Endpoint of AOS-CX](https://agentprime.io/advisories/CVE-2026-73766.md) `CVE-2026-73766` · CVE record: Hewlett Packard Enterprise (HPE) AOS-CX · CVSS 7.2 High · Not analysed yet · Published 1 Sept 2026 · Tags: Command injection - [Authenticated Path Traversal Vulnerabilities Lead to Remote Code Execution in AOS-CX](https://agentprime.io/advisories/CVE-2026-73765.md) `CVE-2026-73765` · CVE record: Hewlett Packard Enterprise (HPE) AOS-CX · CVSS 7.2 High · Not analysed yet · Published 1 Sept 2026 · Tags: Path traversal - [Authentication Bypass Vulnerabilities Leading to Unauthorized Modification and Service Disruption in AOS-CX](https://agentprime.io/advisories/CVE-2026-73764.md) `CVE-2026-73764` · CVE record: Hewlett Packard Enterprise (HPE) AOS-CX · CVSS 7.1 High · Not analysed yet · Published 1 Sept 2026 · Tags: Authentication bypass - [Unauthenticated Remote Command Execution in Management Component](https://agentprime.io/advisories/CVE-2026-73763.md) `CVE-2026-73763` · CVE record: Hewlett Packard Enterprise (HPE) AOS-CX · CVSS 7.1 High · Not analysed yet · Published 1 Sept 2026 · Tags: Command injection - [Authorization Bypass in the API Endpoint of AOS-CX Leads to Unauthorized Access](https://agentprime.io/advisories/CVE-2026-73762.md) `CVE-2026-73762` · CVE record: Hewlett Packard Enterprise (HPE) AOS-CX · CVSS 6.6 Medium · Not analysed yet · Published 1 Sept 2026 · Tags: Broken access control - [Unauthenticated Out-of-Bounds Read Vulnerability leads to Information Disclosure in AOS-CX](https://agentprime.io/advisories/CVE-2026-73761.md) `CVE-2026-73761` · CVE record: Hewlett Packard Enterprise (HPE) AOS-CX · CVSS 6.5 Medium · Not analysed yet · Published 1 Sept 2026 · Tags: Memory corruption - [Authenticated Path Traversal Vulnerability Leads to Remote Unauthorized Access to Files in AOS-CX](https://agentprime.io/advisories/CVE-2026-73760.md) `CVE-2026-73760` · CVE record: Hewlett Packard Enterprise (HPE) AOS-CX · CVSS 6.5 Medium · Not analysed yet · Published 1 Sept 2026 · Tags: Path traversal - [Unauthenticated Denial-of-Service Vulnerabilities in AOS-CX](https://agentprime.io/advisories/CVE-2026-73759.md) `CVE-2026-73759` · CVE record: Hewlett Packard Enterprise (HPE) AOS-CX · CVSS 6.5 Medium · Not analysed yet · Published 1 Sept 2026 · Tags: Denial of service - [Authenticated Privilege Escalation Vulnerability via Broken Access Control in AOS-CX](https://agentprime.io/advisories/CVE-2026-73758.md) `CVE-2026-73758` · CVE record: Hewlett Packard Enterprise (HPE) AOS-CX · CVSS 6.5 Medium · Not analysed yet · Published 1 Sept 2026 · Tags: Privilege escalation - [Authenticated Server-Side Request Forgery (SSRF) Leading to Information Disclosure in AOS-CX](https://agentprime.io/advisories/CVE-2026-73757.md) `CVE-2026-73757` · CVE record: Hewlett Packard Enterprise (HPE) AOS-CX · CVSS 6.4 Medium · Not analysed yet · Published 1 Sept 2026 · Tags: Server-side request forgery (SSRF) - [Unauthenticated Sensitive Information Disclosure via Man-in-the-Middle in AOS-CX via API Endpoint](https://agentprime.io/advisories/CVE-2026-73756.md) `CVE-2026-73756` · CVE record: Hewlett Packard Enterprise (HPE) AOS-CX · CVSS 5.9 Medium · Not analysed yet · Published 1 Sept 2026 · Tags: Weak cryptography or TLS - [Privilege Escalation via Unauthorized Access to Sensitive Session Information](https://agentprime.io/advisories/CVE-2026-73755.md) `CVE-2026-73755` · CVE record: Hewlett Packard Enterprise (HPE) AOS-CX · CVSS 5.7 Medium · Not analysed yet · Published 1 Sept 2026 · Tags: Privilege escalation - [Authenticated Denial-of-Service Vulnerabilities in the Command Line Interface of AOS-CX](https://agentprime.io/advisories/CVE-2026-73754.md) `CVE-2026-73754` · CVE record: Hewlett Packard Enterprise (HPE) AOS-CX · CVSS 5.3 Medium · Not analysed yet · Published 1 Sept 2026 · Tags: Denial of service - [Authenticated Remote Command Injection Vulnerabilities in AOS-CX Command Line Interface](https://agentprime.io/advisories/CVE-2026-73753.md) `CVE-2026-73753` · CVE record: Hewlett Packard Enterprise (HPE) AOS-CX · CVSS 8.8 High · Not analysed yet · Published 1 Sept 2026 · Tags: Command injection - [Unauthenticated Arbitrary File Write Vulnerability Leads to Remote Code Execution in AOS-CX](https://agentprime.io/advisories/CVE-2026-73752.md) `CVE-2026-73752` · CVE record: Hewlett Packard Enterprise (HPE) AOS-CX · CVSS 8.8 High · Not analysed yet · Published 1 Sept 2026 · Tags: Path traversal - [Authenticated Remote Command Injection in AOS-CX Web-based Management Interface](https://agentprime.io/advisories/CVE-2026-73751.md) `CVE-2026-73751` · CVE record: Hewlett Packard Enterprise (HPE) AOS-CX · CVSS 8.8 High · Not analysed yet · Published 1 Sept 2026 · Tags: Command injection - [Authenticated Buffer Overflow Vulnerabilities in AOS-CX API Endpoint Leads to Possible Code Execution](https://agentprime.io/advisories/CVE-2026-73750.md) `CVE-2026-73750` · CVE record: Hewlett Packard Enterprise (HPE) AOS-CX · CVSS 8.8 High · Not analysed yet · Published 1 Sept 2026 · Tags: Broken access control - [Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-CX](https://agentprime.io/advisories/CVE-2026-73749.md) `CVE-2026-73749` · CVE record: Hewlett Packard Enterprise (HPE) AOS-CX · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Sept 2026 · Tags: Broken access control - [Authenticated Path Traversal Vulnerability Leads to Remote Code Execution in AOS-CX](https://agentprime.io/advisories/CVE-2026-63454.md) `CVE-2026-63454` · CVE record: Hewlett Packard Enterprise (HPE) AOS-CX · CVSS 7.2 High · Not analysed yet · Published 21 Jul 2026 · Tags: Path traversal - [Authenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-CX](https://agentprime.io/advisories/CVE-2026-63453.md) `CVE-2026-63453` · CVE record: Hewlett Packard Enterprise (HPE) AOS-CX · CVSS 7.2 High · Not analysed yet · Published 21 Jul 2026 · Tags: Memory corruption - [Low-Privilege Authenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-CX](https://agentprime.io/advisories/CVE-2026-44880.md) `CVE-2026-44880` · CVE record: Hewlett Packard Enterprise (HPE) AOS-CX · CVSS 8.8 High · Not analysed yet · Published 21 Jul 2026 · Tags: Memory corruption - [Unauthenticated Open Redirect allows URL Manipulation in Web Interface](https://agentprime.io/advisories/CVE-2026-23817.md) `CVE-2026-23817` · CVE record: Hewlett Packard Enterprise (HPE) AOS-CX · CVSS 6.5 Medium · Not analysed yet · Published 11 Mar 2026 · Tags: Open redirect - [Authenticated Command Injection found in admin AOS-CX CLI command](https://agentprime.io/advisories/CVE-2026-23816.md) `CVE-2026-23816` · CVE record: Hewlett Packard Enterprise (HPE) AOS-CX · CVSS 7.2 High · Not analysed yet · Published 11 Mar 2026 · Tags: Command injection - [Authenticated Command Injection found in AOS-CX Administrative CLI Command](https://agentprime.io/advisories/CVE-2026-23815.md) `CVE-2026-23815` · CVE record: Hewlett Packard Enterprise (HPE) AOS-CX · CVSS 7.2 High · Not analysed yet · Published 11 Mar 2026 · Tags: Command injection - [Authenticated Command Injection found in AOS-CX CLI Command](https://agentprime.io/advisories/CVE-2026-23814.md) `CVE-2026-23814` · CVE record: Hewlett Packard Enterprise (HPE) AOS-CX · CVSS 8.8 High · Not analysed yet · Published 11 Mar 2026 · Tags: Command injection - [Authentication Bypass in Web Interface allows Unauthenticated Admin Password Reset](https://agentprime.io/advisories/CVE-2026-23813.md) `CVE-2026-23813` · CVE record: Hewlett Packard Enterprise (HPE) AOS-CX · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Mar 2026 · Tags: Authentication bypass - [Authenticated Sensitive Information Disclosure exposes Credentials in AOS-CX Command Line Interface](https://agentprime.io/advisories/CVE-2025-27080.md) `CVE-2025-27080` · CVE record: Hewlett Packard Enterprise (HPE) AOS-CX · CVSS 6.0 Medium · Not analysed yet · Published 18 Mar 2025 · Tags: Information disclosure - [Authenticated Access Control Vulnerability allows Sensitive Information Disclosure in AOS-CX REST Interface](https://agentprime.io/advisories/CVE-2025-25042.md) `CVE-2025-25042` · CVE record: Hewlett Packard Enterprise (HPE) AOS-CX · CVSS 4.3 Medium · Not analysed yet · Published 18 Mar 2025 · Tags: Information disclosure - [Failure to Properly Enforce Port ACLs on CPU generated packets in CX 9300 Switches](https://agentprime.io/advisories/CVE-2025-25040.md) `CVE-2025-25040` · CVE record: Hewlett Packard Enterprise (HPE) AOS-CX · CVSS 3.3 Low · Not analysed yet · Published 18 Mar 2025 · Tags: Broken access control - [Unauthenticated Traffic Handling Flaw Allows Packet Leakage on HPE Aruba Networking CX 10000 series switches](https://agentprime.io/advisories/CVE-2024-54010.md) `CVE-2024-54010` · CVE record: Hewlett Packard Enterprise (HPE) AOS-CX · CVSS 3.4 Low · Not analysed yet · Published 8 Jan 2025 · Tags: Broken access control ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .