product of hpe

arubaos-cx

17 thingsrelated by NVD

Severity

critical 3 high 10 medium 2 low 2

Being told

Watch: its feed Ask more of it

The feed says each thing that enters, leaves or changes; a reader adds its address, /zetlyn/trackers/cve/things.atom?q=…, to theirs.

Every thing

Stack overflow vulnerabilities exist in an API endpoint of AOS-CX. Successful exploitation could allow an authenticated malicious actor to… CVE-2026-73783	Severity medium
A vulnerability in the web-based management interface of AOS-CX switches exposes some sessions to a lack of Cross-Site Request Forgery… CVE-2026-73780	Severity high
A vulnerability exists in the Credential Manager component that may allow for unauthorized administrative access. An unauthenticated remote… CVE-2026-73778	Severity critical
A vulnerability exists in a management component that could allow an unauthenticated adjacent attacker to execute arbitrary commands… CVE-2026-73763	Severity high
Vulnerabilities in AOS-CX could allow an unauthenticated remote malicious actor to trigger a denial-of-service condition by sending… CVE-2026-73759	Severity medium
Exploitation through affected command-line operations could allow an authenticated low-privileged user to execute arbitrary commands as a… CVE-2026-73753	Severity high
An unauthenticated arbitrary file write vulnerability exists in an API endpoint of AOS-CX. Successful exploitation of this vulnerability… CVE-2026-73752	Severity high
An authenticated user with low-privileged access could submit crafted input through the web-based management interface to execute arbitrary… CVE-2026-73751	Severity high
Vulnerabilities exist in the authentication module that may improperly process malformed or truncated input. An authenticated remote… CVE-2026-73750	Severity high
Multiple vulnerabilities exist in a daemon of AOS-CX that may allow for improper processing of malformed input. An unauthenticated remote… CVE-2026-73749	Severity critical
A vulnerability in the command line interface of AOS-CX Switches could allow an authenticated remote attacker to execute arbitrary commands… CVE-2026-23816	Severity high
A vulnerability in a custom binary used in AOS-CX Switches' CLI could allow an authenticated remote attacker with high privileges to… CVE-2026-23815	Severity high
A vulnerability in the command parameters of a certain AOS-CX CLI command could allow a low-privilege authenticated remote attacker to… CVE-2026-23814	Severity high
A vulnerability has been identified in the web-based management interface of AOS-CX switches that could potentially allow an… CVE-2026-23813	Severity critical
A vulnerability has been identified in the port ACL functionality of AOS-CX software running on the HPE Aruba Networking CX 9300 Switch… CVE-2025-25040	Severity low
A vulnerability in the firewall component of HPE Aruba Networking CX 10000 Series Switches exists. It could allow an unauthenticated… CVE-2024-54010	Severity low
The Diffie-Hellman Key Agreement Protocol allows remote attackers (from the client side) to send arbitrary numbers that are actually not… CVE-2002-20001	Severity high