{"id":"CVE-2026-73764","aliases":["EUVD-2026-69628","GHSA-hr8p-9qx4-wjg9"],"status":"published","title":"Authentication Bypass Vulnerabilities Leading to Unauthorized Modification and Service Disruption in AOS-CX","description":"Vulnerabilities have been identified in the operating system of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. In some cases this could enable unauthorized modification of affected resources and limited disruption of affected services.","severity":{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00306,"percentile":0.2373,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-287"],"published":"2026-09-01T20:28:23Z","modified":"2026-09-04T15:00:18Z","products":[{"vendor":"hewlett packard enterprise (hpe)","product":"aos-cx"},{"vendor":"hpe","product":"arubaos-cx"}],"references":[{"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05134en_us\u0026docLocale=en_US","tags":["Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-73764"},{"url":"https://github.com/advisories/GHSA-hr8p-9qx4-wjg9"}],"sources":{"cve":[{"id":"CVE-2026-73764","title":"Authentication Bypass Vulnerabilities Leading to Unauthorized Modification and Service Disruption in AOS-CX","description":"Vulnerabilities have been identified in the operating system of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. In some cases this could enable unauthorized modification of affected resources and limited disruption of affected services.","status":"published","published":"2026-09-01T20:28:23.792Z","modified":"2026-09-02T13:30:47.172Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L","level":"high","assessor":"cna"}],"cwes":["CWE-287"],"updated_at":"2026-11-02T13:43:33.766176Z"}],"euvd":[{"id":"EUVD-2026-69628","description":"Vulnerabilities have been identified in the operating system of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. In some cases this could enable unauthorized modification of affected resources and limited disruption of affected services.","status":"published","published":"2026-09-01T20:28:23Z","modified":"2026-09-02T13:30:47Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L","level":"high"}],"updated_at":"2026-11-02T18:01:16.020579Z"}],"ghsa":[{"id":"GHSA-hr8p-9qx4-wjg9","title":"Vulnerabilities have been identified in the operating system of AOS-CX switches that could...","description":"Vulnerabilities have been identified in the operating system of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. In some cases this could enable unauthorized modification of affected resources and limited disruption of affected services.","status":"published","published":"2026-09-01T21:31:51Z","modified":"2026-09-02T15:34:37Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L","level":"high"}],"cwes":["CWE-287"],"updated_at":"2026-11-02T15:11:16.730606Z"}],"nvd":[{"id":"CVE-2026-73764","description":"Vulnerabilities have been identified in the operating system of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. In some cases this could enable unauthorized modification of affected resources and limited disruption of affected services.","status":"published","published":"2026-09-01T21:18:43.18Z","modified":"2026-09-04T15:00:18.933Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L","level":"high","assessor":"secondary"}],"cwes":["CWE-287"],"updated_at":"2026-11-02T14:12:43.04945Z"}]}}