GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

NCSC-2026-0340

Vulnerability from csaf_ncscnl - Published: 2026-09-03 14:07 - Updated: 2026-09-03 14:07
Summary
Kwetsbaarheden verholpen in Aruba Networks ArubaOS-CX
Notes
The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions: NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein. NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory. This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings.
Feiten: Aruba Networks heeft meerdere kwetsbaarheden verholpen in het AOS-CX netwerk besturingssysteem en de bijbehorende componenten, waaronder de command line interface, API endpoints en web-based management interface.
Interpretaties: De kwetsbaarheden in AOS-CX betreffen onder andere onbevoegde toegang via bypass van authenticatie, remote code execution door onjuiste verwerking van input zoals format strings en command injection, privilege escalatie door onjuiste toegang tot systeemfuncties, en denial-of-service door buffer overflows en stack overflows. Sommige kwetsbaarheden kunnen worden misbruikt zonder authenticatie, terwijl andere een geauthenticeerde gebruiker met lage privileges vereisen. Exploitatie kan leiden tot het uitvoeren van willekeurige code met verhoogde privileges, ongeautoriseerde configuratiewijzigingen, toegang tot gevoelige informatie, en verstoring van de beschikbaarheid van het systeem. Specifieke aanvalsvectoren omvatten onder meer het schrijven van bestanden via API endpoints, CSRF-aanvallen op de webinterface, SSRF-aanvallen, en het omzeilen van signature verificatie. De kwetsbaarheden zijn aanwezig in verschillende onderdelen van het AOS-CX platform, waaronder de daemon, API, command line interface en web management interface.
Oplossingen: Aruba Networks heeft updates uitgebracht om de kwetsbaarheden in AOS-CX te verhelpen. Zie bijgevoegde referenties voor meer informatie.
Kans: medium
Schade: high
CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CWE-73: External Control of File Name or Path
CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection')
CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
CWE-121: Stack-based Buffer Overflow
CWE-125: Out-of-bounds Read
CWE-134: Use of Externally-Controlled Format String
CWE-352: Cross-Site Request Forgery (CSRF)
CWE-521: Weak Password Requirements
CWE-918: Server-Side Request Forgery (SSRF)
CVE-2026-73749

Multiple vulnerabilities in an AOS-CX daemon enable an unauthenticated remote attacker to send crafted packets that may result in remote code execution with elevated privileges.

9.8 (Critical)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
Product Identifier Version Remediation
vers:unknown/*
Aruba Networks / ArubaOS-CX
 vers:unknown/*
vers:unknown/*
HPE / AOS-CX
 vers:unknown/*
CVE-2026-73750

An authentication module contains vulnerabilities that permit an authenticated remote attacker to cause Denial-of-Service or execute remote code with elevated privileges via specially crafted input.

8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
Product Identifier Version Remediation
vers:unknown/*
Aruba Networks / ArubaOS-CX
 vers:unknown/*
vers:unknown/*
HPE / AOS-CX
 vers:unknown/*
CVE-2026-73751

A low-privileged authenticated user can exploit a vulnerability in the web-based management interface to execute arbitrary operating system commands, potentially compromising system integrity.

8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
Product Identifier Version Remediation
vers:unknown/*
Aruba Networks / ArubaOS-CX
 vers:unknown/*
vers:unknown/*
HPE / AOS-CX
 vers:unknown/*
CVE-2026-73752

An unauthenticated arbitrary file write vulnerability in an AOS-CX API endpoint allows attackers to write files to the operating system, potentially enabling remote code execution.

8.8 (High)
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Affected products
Product Identifier Version Remediation
vers:unknown/*
Aruba Networks / ArubaOS-CX
 vers:unknown/*
vers:unknown/*
HPE / AOS-CX
 vers:unknown/*
CVE-2026-73753

An authenticated low-privileged user can exploit specific command-line operations to execute arbitrary commands with elevated operating system privileges, potentially compromising system integrity.

8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Affected products
Product Identifier Version Remediation
vers:unknown/*
Aruba Networks / ArubaOS-CX
 vers:unknown/*
vers:unknown/*
HPE / AOS-CX
 vers:unknown/*
CVE-2026-73782

A format string vulnerability in the AOS-CX command line interface allows unauthenticated attackers to execute arbitrary code with privileged operating system access.

8.8 (High)
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-134 - Use of Externally-Controlled Format String
Affected products
Product Identifier Version Remediation
vers:unknown/*
Aruba Networks / ArubaOS-CX
 vers:unknown/*
vers:unknown/*
HPE / AOS-CX
 vers:unknown/*
CVE-2026-73780

AOS-CX switches have a web-based management interface vulnerability that allows remote unauthenticated attackers to perform arbitrary actions via Cross-Site Request Forgery if an authenticated user accesses a malicious URL.

8.3 (High)
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
CWE-352 - Cross-Site Request Forgery (CSRF)
Affected products
Product Identifier Version Remediation
vers:unknown/*
Aruba Networks / ArubaOS-CX
 vers:unknown/*
vers:unknown/*
HPE / AOS-CX
 vers:unknown/*
CVE-2026-73779

Vulnerabilities in the AOS-CX switch operating system allow unauthenticated remote attackers to bypass authentication controls, risking system integrity and exposure of sensitive data.

8.2 (High)
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L
Affected products
Product Identifier Version Remediation
vers:unknown/*
Aruba Networks / ArubaOS-CX
 vers:unknown/*
vers:unknown/*
HPE / AOS-CX
 vers:unknown/*
CVE-2026-73778

A vulnerability in Credential Manager allows unauthenticated remote attackers to gain full administrative control during initial device setup by exploiting a predictable factory-default password before administrator credentials are configured.

8.1 (High)
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-521 - Weak Password Requirements
Affected products
Product Identifier Version Remediation
vers:unknown/*
Aruba Networks / ArubaOS-CX
 vers:unknown/*
vers:unknown/*
HPE / AOS-CX
 vers:unknown/*
CVE-2026-73777

A vulnerability in the API endpoint of AOS-CX switches allows unauthenticated remote actors to bypass authentication controls, potentially compromising device security.

8.1 (High)
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
Product Identifier Version Remediation
vers:unknown/*
Aruba Networks / ArubaOS-CX
 vers:unknown/*
vers:unknown/*
HPE / AOS-CX
 vers:unknown/*
CVE-2026-73776

A signature verification bypass vulnerability in the AOS-CX command line interface allows an authenticated admin user to execute arbitrary code on the operating system under certain external conditions.

7.9 (High)
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N
Affected products
Product Identifier Version Remediation
vers:unknown/*
Aruba Networks / ArubaOS-CX
 vers:unknown/*
vers:unknown/*
HPE / AOS-CX
 vers:unknown/*
CVE-2026-73775

A vulnerability in the AOS-CX API endpoint allows a low-privilege authenticated remote attacker to access sensitive information, potentially enabling further unauthorized access to network services.

7.7 (High)
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Affected products
Product Identifier Version Remediation
vers:unknown/*
Aruba Networks / ArubaOS-CX
 vers:unknown/*
vers:unknown/*
HPE / AOS-CX
 vers:unknown/*
CVE-2026-73774

A buffer overflow vulnerability in the AOS-CX operating system allows unauthenticated attackers to disclose sensitive information, potentially enabling limited data modification and system disruption.

7.6 (High)
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Affected products
Product Identifier Version Remediation
vers:unknown/*
Aruba Networks / ArubaOS-CX
 vers:unknown/*
vers:unknown/*
HPE / AOS-CX
 vers:unknown/*
CVE-2026-73773

An unauthenticated Denial-of-Service (DoS) vulnerability in the AOS-CX API endpoint allows attackers to disrupt the normal operation of the affected service by exploiting the exposed interface.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
Product Identifier Version Remediation
vers:unknown/*
Aruba Networks / ArubaOS-CX
 vers:unknown/*
vers:unknown/*
HPE / AOS-CX
 vers:unknown/*
CVE-2026-73770

An authenticated arbitrary file write vulnerability in AOS-CX allows a malicious user, with another user's action, to create or modify files and execute commands with privileged OS access.

7.3 (High)
CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H
CWE-73 - External Control of File Name or Path
Affected products
Product Identifier Version Remediation
vers:unknown/*
Aruba Networks / ArubaOS-CX
 vers:unknown/*
vers:unknown/*
HPE / AOS-CX
 vers:unknown/*
CVE-2026-73764

Multiple vulnerabilities in the AOS-CX switch operating system allow unauthenticated remote actors to bypass authentication controls, potentially enabling unauthorized resource modification and limited service disruption.

7.1 (High)
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L
Affected products
Product Identifier Version Remediation
vers:unknown/*
Aruba Networks / ArubaOS-CX
 vers:unknown/*
vers:unknown/*
HPE / AOS-CX
 vers:unknown/*
CVE-2026-73763

A vulnerability in a management component enables an unauthenticated adjacent attacker to remotely execute arbitrary commands on the affected utility, posing significant security risks.

7.1 (High)
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L
CWE-77 - Improper Neutralization of Special Elements used in a Command ('Command Injection')
Affected products
Product Identifier Version Remediation
vers:unknown/*
Aruba Networks / ArubaOS-CX
 vers:unknown/*
vers:unknown/*
HPE / AOS-CX
 vers:unknown/*
CVE-2026-73762

A vulnerability in the AOS-CX API endpoint allows remote attackers to bypass access controls and gain unauthorized access to restricted management functions.

6.6 (Medium)
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L
Affected products
Product Identifier Version Remediation
vers:unknown/*
Aruba Networks / ArubaOS-CX
 vers:unknown/*
vers:unknown/*
HPE / AOS-CX
 vers:unknown/*
CVE-2026-73761

An out-of-bounds read vulnerability in the AOS-CX operating system allows unauthenticated attackers to disclose sensitive information by sending specially crafted packets.

6.5 (Medium)
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CWE-125 - Out-of-bounds Read
Affected products
Product Identifier Version Remediation
vers:unknown/*
Aruba Networks / ArubaOS-CX
 vers:unknown/*
vers:unknown/*
HPE / AOS-CX
 vers:unknown/*
CVE-2026-73760

An authenticated Path Traversal vulnerability in AOS-CX enables attackers to read arbitrary files through the web-based management interface, potentially allowing unauthorized remote file access.

6.5 (Medium)
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Affected products
Product Identifier Version Remediation
vers:unknown/*
Aruba Networks / ArubaOS-CX
 vers:unknown/*
vers:unknown/*
HPE / AOS-CX
 vers:unknown/*
CVE-2026-73758

A privilege escalation vulnerability in the AOS-CX API endpoint enables an authenticated low-privilege user to modify certain system settings, potentially impacting system integrity.

6.5 (Medium)
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Affected products
Product Identifier Version Remediation
vers:unknown/*
Aruba Networks / ArubaOS-CX
 vers:unknown/*
vers:unknown/*
HPE / AOS-CX
 vers:unknown/*
CVE-2026-73772

A buffer overflow vulnerability in an AOS-CX service allows unauthenticated attackers to send crafted packets that cause denial-of-service and disrupt the device's operating system.

6.5 (Medium)
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Affected products
Product Identifier Version Remediation
vers:unknown/*
Aruba Networks / ArubaOS-CX
 vers:unknown/*
vers:unknown/*
HPE / AOS-CX
 vers:unknown/*
CVE-2026-73757

A vulnerability in the AOS-CX web management interface enables an authenticated remote attacker to conduct SSRF attacks, potentially exposing and partially modifying sensitive internal information.

6.4 (Medium)
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
CWE-918 - Server-Side Request Forgery (SSRF)
Affected products
Product Identifier Version Remediation
vers:unknown/*
Aruba Networks / ArubaOS-CX
 vers:unknown/*
vers:unknown/*
HPE / AOS-CX
 vers:unknown/*
CVE-2026-73755

A privilege escalation vulnerability in the AOS-CX API endpoint allows an authenticated low-privilege user to access sensitive system information after performing a required action.

5.7 (Medium)
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
Affected products
Product Identifier Version Remediation
vers:unknown/*
Aruba Networks / ArubaOS-CX
 vers:unknown/*
vers:unknown/*
HPE / AOS-CX
 vers:unknown/*
CVE-2026-73754

Denial-of-service vulnerabilities in the AOS-CX command line interface allow authenticated users to disrupt normal system operations, impacting system availability.

5.3 (Medium)
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Affected products
Product Identifier Version Remediation
vers:unknown/*
Aruba Networks / ArubaOS-CX
 vers:unknown/*
vers:unknown/*
HPE / AOS-CX
 vers:unknown/*
CVE-2026-73783

A stack overflow vulnerability in an AOS-CX API endpoint allows an authenticated attacker to trigger a denial-of-service condition on the affected system.

4.9 (Medium)
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
CWE-121 - Stack-based Buffer Overflow
Affected products
Product Identifier Version Remediation
vers:unknown/*
Aruba Networks / ArubaOS-CX
 vers:unknown/*
vers:unknown/*
HPE / AOS-CX
 vers:unknown/*
References
URL Category
https://support.hpe.com/hpesc/public/docDisplay?d… external
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… self
To clipboard 

{
  "document": {
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE"
      }
    },
    "lang": "nl",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n    NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n    NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n    This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings."
      },
      {
        "category": "description",
        "text": "Aruba Networks heeft meerdere kwetsbaarheden verholpen in het AOS-CX netwerk besturingssysteem en de bijbehorende componenten, waaronder de command line interface, API endpoints en web-based management interface.",
        "title": "Feiten"
      },
      {
        "category": "description",
        "text": "De kwetsbaarheden in AOS-CX betreffen onder andere onbevoegde toegang via bypass van authenticatie, remote code execution door onjuiste verwerking van input zoals format strings en command injection, privilege escalatie door onjuiste toegang tot systeemfuncties, en denial-of-service door buffer overflows en stack overflows. Sommige kwetsbaarheden kunnen worden misbruikt zonder authenticatie, terwijl andere een geauthenticeerde gebruiker met lage privileges vereisen. Exploitatie kan leiden tot het uitvoeren van willekeurige code met verhoogde privileges, ongeautoriseerde configuratiewijzigingen, toegang tot gevoelige informatie, en verstoring van de beschikbaarheid van het systeem. Specifieke aanvalsvectoren omvatten onder meer het schrijven van bestanden via API endpoints, CSRF-aanvallen op de webinterface, SSRF-aanvallen, en het omzeilen van signature verificatie. De kwetsbaarheden zijn aanwezig in verschillende onderdelen van het AOS-CX platform, waaronder de daemon, API, command line interface en web management interface.",
        "title": "Interpretaties"
      },
      {
        "category": "description",
        "text": "Aruba Networks heeft updates uitgebracht om de kwetsbaarheden in AOS-CX te verhelpen. Zie bijgevoegde referenties voor meer informatie.",
        "title": "Oplossingen"
      },
      {
        "category": "general",
        "text": "medium",
        "title": "Kans"
      },
      {
        "category": "general",
        "text": "high",
        "title": "Schade"
      },
      {
        "category": "general",
        "text": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
        "title": "CWE-22"
      },
      {
        "category": "general",
        "text": "External Control of File Name or Path",
        "title": "CWE-73"
      },
      {
        "category": "general",
        "text": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)",
        "title": "CWE-77"
      },
      {
        "category": "general",
        "text": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
        "title": "CWE-78"
      },
      {
        "category": "general",
        "text": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
        "title": "CWE-120"
      },
      {
        "category": "general",
        "text": "Stack-based Buffer Overflow",
        "title": "CWE-121"
      },
      {
        "category": "general",
        "text": "Out-of-bounds Read",
        "title": "CWE-125"
      },
      {
        "category": "general",
        "text": "Use of Externally-Controlled Format String",
        "title": "CWE-134"
      },
      {
        "category": "general",
        "text": "Cross-Site Request Forgery (CSRF)",
        "title": "CWE-352"
      },
      {
        "category": "general",
        "text": "Weak Password Requirements",
        "title": "CWE-521"
      },
      {
        "category": "general",
        "text": "Server-Side Request Forgery (SSRF)",
        "title": "CWE-918"
      }
    ],
    "publisher": {
      "category": "coordinator",
      "contact_details": "cert@ncsc.nl",
      "name": "Nationaal Cyber Security Centrum",
      "namespace": "https://www.ncsc.nl/"
    },
    "references": [
      {
        "category": "external",
        "summary": "Reference",
        "url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05134en_us\u0026docLocale=en_US"
      }
    ],
    "title": "Kwetsbaarheden verholpen in Aruba Networks ArubaOS-CX",
    "tracking": {
      "current_release_date": "2026-09-03T14:07:01.707262Z",
      "generator": {
        "date": "2025-08-04T16:30:00Z",
        "engine": {
          "name": "V.A.",
          "version": "1.3"
        }
      },
      "id": "NCSC-2026-0340",
      "initial_release_date": "2026-09-03T14:07:01.707262Z",
      "revision_history": [
        {
          "date": "2026-09-03T14:07:01.707262Z",
          "number": "1.0.0",
          "summary": "Initiele versie"
        }
      ],
      "status": "final",
      "version": "1.0.0"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-1"
                }
              }
            ],
            "category": "product_name",
            "name": "ArubaOS-CX"
          }
        ],
        "category": "vendor",
        "name": "Aruba Networks"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-2"
                }
              }
            ],
            "category": "product_name",
            "name": "AOS-CX"
          }
        ],
        "category": "vendor",
        "name": "HPE"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-73749",
      "notes": [
        {
          "category": "description",
          "text": "Multiple vulnerabilities in an AOS-CX daemon enable an unauthenticated remote attacker to send crafted packets that may result in remote code execution with elevated privileges.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-73749 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-73749.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2"
          ]
        }
      ],
      "title": "CVE-2026-73749"
    },
    {
      "cve": "CVE-2026-73750",
      "notes": [
        {
          "category": "description",
          "text": "An authentication module contains vulnerabilities that permit an authenticated remote attacker to cause Denial-of-Service or execute remote code with elevated privileges via specially crafted input.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-73750 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-73750.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2"
          ]
        }
      ],
      "title": "CVE-2026-73750"
    },
    {
      "cve": "CVE-2026-73751",
      "notes": [
        {
          "category": "description",
          "text": "A low-privileged authenticated user can exploit a vulnerability in the web-based management interface to execute arbitrary operating system commands, potentially compromising system integrity.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-73751 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-73751.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2"
          ]
        }
      ],
      "title": "CVE-2026-73751"
    },
    {
      "cve": "CVE-2026-73752",
      "cwe": {
        "id": "CWE-22",
        "name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
          "title": "CWE-22"
        },
        {
          "category": "description",
          "text": "An unauthenticated arbitrary file write vulnerability in an AOS-CX API endpoint allows attackers to write files to the operating system, potentially enabling remote code execution.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-73752 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-73752.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2"
          ]
        }
      ],
      "title": "CVE-2026-73752"
    },
    {
      "cve": "CVE-2026-73753",
      "cwe": {
        "id": "CWE-78",
        "name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "title": "CWE-78"
        },
        {
          "category": "description",
          "text": "An authenticated low-privileged user can exploit specific command-line operations to execute arbitrary commands with elevated operating system privileges, potentially compromising system integrity.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-73753 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-73753.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2"
          ]
        }
      ],
      "title": "CVE-2026-73753"
    },
    {
      "cve": "CVE-2026-73782",
      "cwe": {
        "id": "CWE-134",
        "name": "Use of Externally-Controlled Format String"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use of Externally-Controlled Format String",
          "title": "CWE-134"
        },
        {
          "category": "description",
          "text": "A format string vulnerability in the AOS-CX command line interface allows unauthenticated attackers to execute arbitrary code with privileged operating system access.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-73782 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-73782.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2"
          ]
        }
      ],
      "title": "CVE-2026-73782"
    },
    {
      "cve": "CVE-2026-73780",
      "cwe": {
        "id": "CWE-352",
        "name": "Cross-Site Request Forgery (CSRF)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Cross-Site Request Forgery (CSRF)",
          "title": "CWE-352"
        },
        {
          "category": "description",
          "text": "AOS-CX switches have a web-based management interface vulnerability that allows remote unauthenticated attackers to perform arbitrary actions via Cross-Site Request Forgery if an authenticated user accesses a malicious URL.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-73780 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-73780.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2"
          ]
        }
      ],
      "title": "CVE-2026-73780"
    },
    {
      "cve": "CVE-2026-73779",
      "notes": [
        {
          "category": "description",
          "text": "Vulnerabilities in the AOS-CX switch operating system allow unauthenticated remote attackers to bypass authentication controls, risking system integrity and exposure of sensitive data.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-73779 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-73779.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2"
          ]
        }
      ],
      "title": "CVE-2026-73779"
    },
    {
      "cve": "CVE-2026-73778",
      "cwe": {
        "id": "CWE-521",
        "name": "Weak Password Requirements"
      },
      "notes": [
        {
          "category": "other",
          "text": "Weak Password Requirements",
          "title": "CWE-521"
        },
        {
          "category": "description",
          "text": "A vulnerability in Credential Manager allows unauthenticated remote attackers to gain full administrative control during initial device setup by exploiting a predictable factory-default password before administrator credentials are configured.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-73778 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-73778.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2"
          ]
        }
      ],
      "title": "CVE-2026-73778"
    },
    {
      "cve": "CVE-2026-73777",
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability in the API endpoint of AOS-CX switches allows unauthenticated remote actors to bypass authentication controls, potentially compromising device security.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-73777 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-73777.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2"
          ]
        }
      ],
      "title": "CVE-2026-73777"
    },
    {
      "cve": "CVE-2026-73776",
      "notes": [
        {
          "category": "description",
          "text": "A signature verification bypass vulnerability in the AOS-CX command line interface allows an authenticated admin user to execute arbitrary code on the operating system under certain external conditions.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-73776 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-73776.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.9,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2"
          ]
        }
      ],
      "title": "CVE-2026-73776"
    },
    {
      "cve": "CVE-2026-73775",
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability in the AOS-CX API endpoint allows a low-privilege authenticated remote attacker to access sensitive information, potentially enabling further unauthorized access to network services.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-73775 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-73775.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2"
          ]
        }
      ],
      "title": "CVE-2026-73775"
    },
    {
      "cve": "CVE-2026-73774",
      "cwe": {
        "id": "CWE-120",
        "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
          "title": "CWE-120"
        },
        {
          "category": "description",
          "text": "A buffer overflow vulnerability in the AOS-CX operating system allows unauthenticated attackers to disclose sensitive information, potentially enabling limited data modification and system disruption.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-73774 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-73774.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.6,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2"
          ]
        }
      ],
      "title": "CVE-2026-73774"
    },
    {
      "cve": "CVE-2026-73773",
      "notes": [
        {
          "category": "description",
          "text": "An unauthenticated Denial-of-Service (DoS) vulnerability in the AOS-CX API endpoint allows attackers to disrupt the normal operation of the affected service by exploiting the exposed interface.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-73773 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-73773.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2"
          ]
        }
      ],
      "title": "CVE-2026-73773"
    },
    {
      "cve": "CVE-2026-73770",
      "cwe": {
        "id": "CWE-73",
        "name": "External Control of File Name or Path"
      },
      "notes": [
        {
          "category": "other",
          "text": "External Control of File Name or Path",
          "title": "CWE-73"
        },
        {
          "category": "description",
          "text": "An authenticated arbitrary file write vulnerability in AOS-CX allows a malicious user, with another user\u0027s action, to create or modify files and execute commands with privileged OS access.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-73770 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-73770.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2"
          ]
        }
      ],
      "title": "CVE-2026-73770"
    },
    {
      "cve": "CVE-2026-73764",
      "notes": [
        {
          "category": "description",
          "text": "Multiple vulnerabilities in the AOS-CX switch operating system allow unauthenticated remote actors to bypass authentication controls, potentially enabling unauthorized resource modification and limited service disruption.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-73764 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-73764.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2"
          ]
        }
      ],
      "title": "CVE-2026-73764"
    },
    {
      "cve": "CVE-2026-73763",
      "cwe": {
        "id": "CWE-77",
        "name": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)",
          "title": "CWE-77"
        },
        {
          "category": "description",
          "text": "A vulnerability in a management component enables an unauthenticated adjacent attacker to remotely execute arbitrary commands on the affected utility, posing significant security risks.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-73763 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-73763.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2"
          ]
        }
      ],
      "title": "CVE-2026-73763"
    },
    {
      "cve": "CVE-2026-73762",
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability in the AOS-CX API endpoint allows remote attackers to bypass access controls and gain unauthorized access to restricted management functions.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-73762 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-73762.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.6,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2"
          ]
        }
      ],
      "title": "CVE-2026-73762"
    },
    {
      "cve": "CVE-2026-73761",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Read",
          "title": "CWE-125"
        },
        {
          "category": "description",
          "text": "An out-of-bounds read vulnerability in the AOS-CX operating system allows unauthenticated attackers to disclose sensitive information by sending specially crafted packets.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-73761 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-73761.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2"
          ]
        }
      ],
      "title": "CVE-2026-73761"
    },
    {
      "cve": "CVE-2026-73760",
      "cwe": {
        "id": "CWE-22",
        "name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
          "title": "CWE-22"
        },
        {
          "category": "description",
          "text": "An authenticated Path Traversal vulnerability in AOS-CX enables attackers to read arbitrary files through the web-based management interface, potentially allowing unauthorized remote file access.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-73760 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-73760.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2"
          ]
        }
      ],
      "title": "CVE-2026-73760"
    },
    {
      "cve": "CVE-2026-73758",
      "notes": [
        {
          "category": "description",
          "text": "A privilege escalation vulnerability in the AOS-CX API endpoint enables an authenticated low-privilege user to modify certain system settings, potentially impacting system integrity.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-73758 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-73758.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2"
          ]
        }
      ],
      "title": "CVE-2026-73758"
    },
    {
      "cve": "CVE-2026-73772",
      "cwe": {
        "id": "CWE-120",
        "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
          "title": "CWE-120"
        },
        {
          "category": "description",
          "text": "A buffer overflow vulnerability in an AOS-CX service allows unauthenticated attackers to send crafted packets that cause denial-of-service and disrupt the device\u0027s operating system.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-73772 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-73772.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2"
          ]
        }
      ],
      "title": "CVE-2026-73772"
    },
    {
      "cve": "CVE-2026-73757",
      "cwe": {
        "id": "CWE-918",
        "name": "Server-Side Request Forgery (SSRF)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Server-Side Request Forgery (SSRF)",
          "title": "CWE-918"
        },
        {
          "category": "description",
          "text": "A vulnerability in the AOS-CX web management interface enables an authenticated remote attacker to conduct SSRF attacks, potentially exposing and partially modifying sensitive internal information.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-73757 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-73757.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2"
          ]
        }
      ],
      "title": "CVE-2026-73757"
    },
    {
      "cve": "CVE-2026-73755",
      "notes": [
        {
          "category": "description",
          "text": "A privilege escalation vulnerability in the AOS-CX API endpoint allows an authenticated low-privilege user to access sensitive system information after performing a required action.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-73755 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-73755.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2"
          ]
        }
      ],
      "title": "CVE-2026-73755"
    },
    {
      "cve": "CVE-2026-73754",
      "notes": [
        {
          "category": "description",
          "text": "Denial-of-service vulnerabilities in the AOS-CX command line interface allow authenticated users to disrupt normal system operations, impacting system availability.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-73754 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-73754.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2"
          ]
        }
      ],
      "title": "CVE-2026-73754"
    },
    {
      "cve": "CVE-2026-73783",
      "cwe": {
        "id": "CWE-121",
        "name": "Stack-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Stack-based Buffer Overflow",
          "title": "CWE-121"
        },
        {
          "category": "description",
          "text": "A stack overflow vulnerability in an AOS-CX API endpoint allows an authenticated attacker to trigger a denial-of-service condition on the affected system.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-73783 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-73783.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2"
          ]
        }
      ],
      "title": "CVE-2026-73783"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.