MEDIUM · 5.9

CVE-2026-73756

A vulnerability in an API endpoint of AOS-CX could allow a remote unauthenticated attacker to obtain sensitive information via a man-in-the-middle attack. Successful exploitation allows an attacker to...

Vulnerability Description

A vulnerability in an API endpoint of AOS-CX could allow a remote unauthenticated attacker to obtain sensitive information via a man-in-the-middle attack. Successful exploitation allows an attacker to retrieve data which could be used to further compromise the confidentiality of the affected system.

CVSS Score

5.9

MEDIUM

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
HpeArubaos-Cx<= 10.10.1180
HpeAruba Cx 10000-48Y6C \(R8P13A\)-
HpeAruba Cx 10000-48Y6C \(R8P14A\)-
HpeAruba Cx 10000-48Y6C \(S0F98A\)-
HpeAruba Cx 10040 \(S4R58A\)-
HpeAruba Cx 10040 32P \(S4R54A\)-
HpeAruba Cx 10040 32P \(S4R55A\)-
HpeAruba Cx 10040 32P \(S4R56A\)-
HpeAruba Cx 4100I 12-Port \(Jl817A\)-
HpeAruba Cx 4100I 24-Port \(Jl818A\)-
HpeAruba Cx 6000 12G \(R8N89A\)-
HpeAruba Cx 6000 12P \(R8N89B\)-
HpeAruba Cx 6000 12P \(S4R21A\)-
HpeAruba Cx 6000 24G \(R8N87A\)-
HpeAruba Cx 6000 24G \(R8N88A\)-
HpeAruba Cx 6000 24P \(R8N87B\)-
HpeAruba Cx 6000 24P \(R8N88B\)-
HpeAruba Cx 6000 24P \(S4R26A\)-
HpeAruba Cx 6000 24P \(S4R27A\)-
HpeAruba Cx 6000 48G \(R8N85A\)-

Related Weaknesses (CWE)

References

FAQ

What is CVE-2026-73756?

CVE-2026-73756 is a vulnerability with a CVSS score of 5.9 (MEDIUM). A vulnerability in an API endpoint of AOS-CX could allow a remote unauthenticated attacker to obtain sensitive information via a man-in-the-middle attack. Successful exploitation allows an attacker to...

How severe is CVE-2026-73756?

CVE-2026-73756 has been rated MEDIUM with a CVSS base score of 5.9/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2026-73756?

Check the references section above for vendor advisories and patch information. Affected products include: Hpe Arubaos-Cx, Hpe Aruba Cx 10000-48Y6C \(R8P13A\), Hpe Aruba Cx 10000-48Y6C \(R8P14A\), Hpe Aruba Cx 10000-48Y6C \(S0F98A\), Hpe Aruba Cx 10040 \(S4R58A\).