Product by Aruba
Aos-cx
39 known vulnerabilities in Aos-cx (Aruba), 0 of them actively exploited (CISA KEV).
Key figures
39
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-73767 | Authenticated Remote Command Injection Vulnerabilities in AOS-CX Command Line Interface | 7.2 | |
| High | CVE-2026-73766 | Authenticated Command Injection Vulnerabilities in the API Endpoint of AOS-CX | 7.2 | |
| High | CVE-2024-39894 | open source OpenSSH: security vulnerability | 7.5 | |
| Critical | CVE-2026-73749 | Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-CX | 9.8 | |
| High | CVE-2026-73750 | Hewlett Packard Enterprise (HPE) AOS-CX: Buffer Overflow | 8.8 | |
| High | CVE-2026-73753 | Authenticated Remote Command Injection Vulnerabilities in AOS-CX Command Line Interface | 8.8 | |
| High | CVE-2026-73751 | Authenticated Remote Command Injection in AOS-CX Web-based Management Interface | 8.8 | |
| High | CVE-2026-44880 | Low-Privilege Authenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-CX | 8.8 | |
| High | CVE-2026-73765 | Authenticated Path Traversal Vulnerabilities Lead to Remote Code Execution in AOS-CX | 7.2 | |
| High | CVE-2026-63454 | Authenticated Path Traversal Vulnerability Leads to Remote Code Execution in AOS-CX | 7.2 | |
| High | CVE-2026-73781 | Hewlett Packard Enterprise (HPE) AOS-CX: Cross-Site Scripting (XSS) | 8.4 | |
| High | CVE-2026-73752 | Unauthenticated Arbitrary File Write Vulnerability Leads to Remote Code Execution in AOS-CX | 8.8 | |
| Critical | CVE-2026-73778 | Credential Manager Vulnerability Allows Unauthorized Administrative Access | 8.1 | |
| High | CVE-2026-73782 | Unauthenticated Format String Vulnerability leads to Remote Code Execution in AOS-CX | 8.8 | |
| High | CVE-2026-73777 | Authorization Bypass Vulnerabilities Leading to Privilege Escalation in AOS-CX API Endpoint | 8.1 | |
| High | CVE-2026-63453 | Authenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-CX | 7.2 | |
| High | CVE-2026-73775 | Authenticated Sensitive Information Disclosure Vulnerabilities in AOS-CX | 7.7 | |
| High | CVE-2026-73771 | Improper Authentication Handling in AOS-CX Management Interface and API | 7.5 | |
| High | CVE-2026-73773 | Unauthenticated Denial-of-Service (DoS) Vulnerability in AOS-CX | 7.5 | |
| Medium | CVE-2026-73760 | Authenticated Path Traversal Vulnerability Leads to Remote Unauthorized Access to Files in AOS-CX | 6.5 | |
| High | CVE-2026-73763 | Unauthenticated Remote Command Execution in Management Component | 7.1 | |
| High | CVE-2026-73779 | Hewlett Packard Enterprise (HPE) AOS-CX: Authentication Bypass | 8.2 | |
| High | CVE-2026-73780 | Hewlett Packard Enterprise (HPE) AOS-CX: Cross-Site Request Forgery (CSRF) | 8.3 | |
| High | CVE-2026-73774 | Unauthenticated Buffer Overflow Vulnerability leads to Sensitive Information Disclosure in AOS-CX | 7.6 | |
| High | CVE-2026-73764 | Hewlett Packard Enterprise (HPE) AOS-CX: Authentication Bypass | 7.1 |
News
- HPE Patches Critical RCE Vulnerabilities in AOS-CXsecurityweek,