CVE-2026-73764 — HIGH (7.1)

Q: How severe is CVE-2026-73764?

CVE-2026-73764 has been rated HIGH with a CVSS base score of 7.1/10. Review the CVSS metrics above for detailed severity breakdown.

Q: Is there a patch for CVE-2026-73764?

Check the references section above for vendor advisories and patch information. Affected products include: Hpe Arubaos-Cx, Hpe Aruba Cx 10000-48Y6C \(R8P13A\), Hpe Aruba Cx 10000-48Y6C \(R8P14A\), Hpe Aruba Cx 10000-48Y6C \(S0F98A\), Hpe Aruba Cx 10040 \(S4R58A\).

Vulnerability Description

Vulnerabilities have been identified in the operating system of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. In some cases this could enable unauthorized modification of affected resources and limited disruption of affected services.

CVSS Score

7.1

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

NONE

Integrity

HIGH

Availability

LOW

Affected Products

Vendor	Product	Versions
Hpe	Arubaos-Cx	<= 10.10.1180
Hpe	Aruba Cx 10000-48Y6C \(R8P13A\)	-
Hpe	Aruba Cx 10000-48Y6C \(R8P14A\)	-
Hpe	Aruba Cx 10000-48Y6C \(S0F98A\)	-
Hpe	Aruba Cx 10040 \(S4R58A\)	-
Hpe	Aruba Cx 10040 32P \(S4R54A\)	-
Hpe	Aruba Cx 10040 32P \(S4R55A\)	-
Hpe	Aruba Cx 10040 32P \(S4R56A\)	-
Hpe	Aruba Cx 4100I 12-Port \(Jl817A\)	-
Hpe	Aruba Cx 4100I 24-Port \(Jl818A\)	-
Hpe	Aruba Cx 6000 12G \(R8N89A\)	-
Hpe	Aruba Cx 6000 12P \(R8N89B\)	-
Hpe	Aruba Cx 6000 12P \(S4R21A\)	-
Hpe	Aruba Cx 6000 24G \(R8N87A\)	-
Hpe	Aruba Cx 6000 24G \(R8N88A\)	-
Hpe	Aruba Cx 6000 24P \(R8N87B\)	-
Hpe	Aruba Cx 6000 24P \(R8N88B\)	-
Hpe	Aruba Cx 6000 24P \(S4R26A\)	-
Hpe	Aruba Cx 6000 24P \(S4R27A\)	-
Hpe	Aruba Cx 6000 48G \(R8N85A\)	-

Related Weaknesses (CWE)

CWE-287

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05134en_us&docLocalPatchVendor Advisory

FAQ

What is CVE-2026-73764?

CVE-2026-73764 is a vulnerability with a CVSS score of 7.1 (HIGH). Vulnerabilities have been identified in the operating system of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. In some cas...

How severe is CVE-2026-73764?

CVE-2026-73764 has been rated HIGH with a CVSS base score of 7.1/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2026-73764?

Check the references section above for vendor advisories and patch information. Affected products include: Hpe Arubaos-Cx, Hpe Aruba Cx 10000-48Y6C \(R8P13A\), Hpe Aruba Cx 10000-48Y6C \(R8P14A\), Hpe Aruba Cx 10000-48Y6C \(S0F98A\), Hpe Aruba Cx 10040 \(S4R58A\).