Product by Hewlett Packard Enterprise (HPE)
HPE ArubaOS-CX (AOS-CX)
57 known vulnerabilities in HPE ArubaOS-CX (AOS-CX) (Hewlett Packard Enterprise (HPE)), 0 of them actively exploited (CISA KEV).
Key figures
57
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
3
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2002-20001 | F5 BIG-IP: security vulnerability | 7.5 | |
| High | CVE-2026-73767 | Authenticated Remote Command Injection Vulnerabilities in AOS-CX Command Line Interface | 7.2 | |
| High | CVE-2026-73766 | Authenticated Command Injection Vulnerabilities in the API Endpoint of AOS-CX | 7.2 | |
| High | CVE-2021-41001 | HPE ArubaOS-CX (AOS-CX): Remote Code Execution | 8.8 | |
| High | CVE-2021-41000 | HPE ArubaOS-CX (AOS-CX): Remote Code Execution | 8.8 | |
| Critical | CVE-2026-73749 | Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-CX | 9.8 | |
| High | CVE-2026-73750 | Hewlett Packard Enterprise (HPE) AOS-CX: Buffer Overflow | 8.8 | |
| High | CVE-2023-3718 | Authenticated Command Injection Vulnerability in AOS-CX Command Line Interface | 8.8 | |
| High | CVE-2026-73753 | Authenticated Remote Command Injection Vulnerabilities in AOS-CX Command Line Interface | 8.8 | |
| High | CVE-2026-73751 | Authenticated Remote Command Injection in AOS-CX Web-based Management Interface | 8.8 | |
| High | CVE-2026-23816 | Authenticated Command Injection found in admin AOS-CX CLI command | 7.2 | |
| High | CVE-2026-44880 | Low-Privilege Authenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-CX | 8.8 | |
| Critical | CVE-2026-23813 | Authentication Bypass in Web Interface allows Unauthenticated Admin Password Reset | 9.8 | |
| High | CVE-2026-73765 | Authenticated Path Traversal Vulnerabilities Lead to Remote Code Execution in AOS-CX | 7.2 | |
| High | CVE-2026-63454 | Authenticated Path Traversal Vulnerability Leads to Remote Code Execution in AOS-CX | 7.2 | |
| High | CVE-2026-73781 | Hewlett Packard Enterprise (HPE) AOS-CX: Cross-Site Scripting (XSS) | 8.4 | |
| High | CVE-2026-23815 | Authenticated Command Injection found in AOS-CX Administrative CLI Command | 7.2 | |
| High | CVE-2026-73752 | Unauthenticated Arbitrary File Write Vulnerability Leads to Remote Code Execution in AOS-CX | 8.8 | |
| Critical | CVE-2026-73778 | Credential Manager Vulnerability Allows Unauthorized Administrative Access | 8.1 | |
| High | CVE-2026-73782 | Unauthenticated Format String Vulnerability leads to Remote Code Execution in AOS-CX | 8.8 | |
| High | CVE-2026-73777 | Authorization Bypass Vulnerabilities Leading to Privilege Escalation in AOS-CX API Endpoint | 8.1 | |
| High | CVE-2026-23814 | Authenticated Command Injection found in AOS-CX CLI Command | 8.8 | |
| High | CVE-2026-63453 | Authenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-CX | 7.2 | |
| High | CVE-2026-73775 | Authenticated Sensitive Information Disclosure Vulnerabilities in AOS-CX | 7.7 | |
| High | CVE-2026-73771 | Improper Authentication Handling in AOS-CX Management Interface and API | 7.5 |
News
- HPE Patches Critical RCE Vulnerabilities in AOS-CXsecurityweek,