CVE-2026-73750CWE-284broken-access-control

CVE-2026-73750

High · published September 2, 2026

CVSS v3.1
8.8
EPSS
1%
Percentile
56.1
In the wild
Unconfirmed
What it is

Vulnerabilities exist in the authentication module that may improperly process malformed or truncated input. An authenticated remote attacker could exploit these vulnerabilities by providing specially crafted input from a compromised or hostile authentication server. Successful exploitation could result in a Denial-of-Service or potential remote code execution with elevated privileges.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00798 · 56.1th percentile
Weakness
CWE-284 · Improper Access Control
Published
2026-09-02T01:18Z
Affected products (5)
ProductVersionsFixed in
hpe/arubaos-cx< 10.10.118110.10.1181
hpe/arubaos-cx≥ 10.13.0000, < 10.13.119010.13.1190
hpe/arubaos-cx≥ 10.16.0000, < 10.16.106010.16.1060
hpe/arubaos-cx≥ 10.17.0000, < 10.17.103010.17.1030
hpe/arubaos-cxall versions—
References (1)
EPSS history
Timeline
  • 03 SEP 03:32Z
    EPSS moved — → 0%
    epss
  • 01 SEP 20:28Z
    Authenticated Buffer Overflow Vulnerabilities in AOS-CX API Endpoint Leads to Possible Code Execution
    cvelistv5