Executive brief
AOS-CX switches are network operating systems used to manage enterprise network infrastructure. A vulnerability in these switches allows unauthenticated remote attackers to bypass authentication controls, potentially modify network resources, and cause limited service disruptions. This could enable unauthorized configuration changes and network outages.
Technical details
An authentication bypass vulnerability exists in the Hewlett Packard Enterprise AOS-CX operating system that permits unauthenticated remote actors to circumvent existing authentication controls. The vulnerability is reachable over the network without requiring valid credentials or user interaction. Successful exploitation could result in unauthorized modification of affected resources and limited disruption of services. The CVE (CVE-2026-73764) has a CVSS score of 7.1 (high severity). Patch availability should be confirmed through official Hewlett Packard Enterprise security advisories.
Affected products
- Hewlett Packard Enterprise AOS-CX
Timeline
- 2026-09-01: disclosed