CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,463 CVEs published, 357 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
5,463
Show in the list
Critical, last 7 days
357
Show in the list
Healthcare-tagged, last 7 days
4
Show in the list
Known exploited (CISA KEV)
1,747
Show in the list

Showing CVEs that name the product hewlett_packard_enterprise_hpe:aos_cx. Show all products

34 CVEs, showing 1 to 34
CVESeverityTitlePublished
CVE-2026-73783Medium 4.9Authenticated Stack Overflow Vulnerabilities lead to Denial-of-Service in AOS-CX
Assigned by hpe
Sep 1, 2026
CVE-2026-73782High 8.8Unauthenticated Format String Vulnerability leads to Remote Code Execution in AOS-CX
Assigned by hpe
Sep 1, 2026
CVE-2026-73781High 8.4Authenticated Stored Cross-Site Scripting Vulnerability (XSS) in AOS-CX Web-Based Management Interface
Assigned by hpe
Sep 1, 2026
CVE-2026-73780High 8.3Lack of Cross-Site Request Forgery (CSRF) Protections for Certificate-Authenticated Sessions in AOS-CX
Assigned by hpe
Sep 1, 2026
CVE-2026-73779High 8.2Authentication Bypass Vulnerabilities Leading to Information Disclosure, Unauthorized Modification, and Service Disruption in AOS-CX
Assigned by hpe
Sep 1, 2026
CVE-2026-73778High 8.1Credential Manager Vulnerability Allows Unauthorized Administrative Access
Assigned by hpe
Sep 1, 2026
CVE-2026-73777High 8.1Authorization Bypass Vulnerabilities Leading to Privilege Escalation in AOS-CX API Endpoint
Assigned by hpe
Sep 1, 2026
CVE-2026-73776High 7.9Authenticated Signature Verification Bypass Leading to Arbitrary Code Execution in AOS-CX
Assigned by hpe
Sep 1, 2026
CVE-2026-73775High 7.7Authenticated Sensitive Information Disclosure Vulnerabilities in AOS-CX
Assigned by hpe
Sep 1, 2026
CVE-2026-73774High 7.6Unauthenticated Buffer Overflow Vulnerability leads to Sensitive Information Disclosure in AOS-CX
Assigned by hpe
Sep 1, 2026
CVE-2026-73773High 7.5Unauthenticated Denial-of-Service (DoS) Vulnerability in AOS-CX
Assigned by hpe
Sep 1, 2026
CVE-2026-73772Medium 6.5Unauthenticated Buffer Overflow Vulnerabilities lead to Denial-of-Service in AOS-CX
Assigned by hpe
Sep 1, 2026
CVE-2026-73771High 7.5Improper Authentication Handling in AOS-CX Management Interface and API
Assigned by hpe
Sep 1, 2026
CVE-2026-73770High 7.3Authenticated Arbitrary File Write Vulnerability Leading to Remote Code Execution in AOS-CX
Assigned by hpe
Sep 1, 2026
CVE-2026-73768High 7.3Local Privilege Escalation in AOS-CX Command Line Interface
Assigned by hpe
Sep 1, 2026
CVE-2026-73767High 7.2Authenticated Remote Command Injection Vulnerabilities in AOS-CX Command Line Interface
Assigned by hpe
Sep 1, 2026
CVE-2026-73766High 7.2Authenticated Command Injection Vulnerabilities in the API Endpoint of AOS-CX
Assigned by hpe
Sep 1, 2026
CVE-2026-73765High 7.2Authenticated Path Traversal Vulnerabilities Lead to Remote Code Execution in AOS-CX
Assigned by hpe
Sep 1, 2026
CVE-2026-73764High 7.1Authentication Bypass Vulnerabilities Leading to Unauthorized Modification and Service Disruption in AOS-CX
Assigned by hpe
Sep 1, 2026
CVE-2026-73763High 7.1Unauthenticated Remote Command Execution in Management Component
Assigned by hpe
Sep 1, 2026
CVE-2026-73762Medium 6.6Authorization Bypass in the API Endpoint of AOS-CX Leads to Unauthorized Access
Assigned by hpe
Sep 1, 2026
CVE-2026-73761Medium 6.5Unauthenticated Out-of-Bounds Read Vulnerability leads to Information Disclosure in AOS-CX
Assigned by hpe
Sep 1, 2026
CVE-2026-73760Medium 6.5Authenticated Path Traversal Vulnerability Leads to Remote Unauthorized Access to Files in AOS-CX
Assigned by hpe
Sep 1, 2026
CVE-2026-73759Medium 6.5Unauthenticated Denial-of-Service Vulnerabilities in AOS-CX
Assigned by hpe
Sep 1, 2026
CVE-2026-73758Medium 6.5Authenticated Privilege Escalation Vulnerability via Broken Access Control in AOS-CX
Assigned by hpe
Sep 1, 2026
CVE-2026-73757Medium 6.4Authenticated Server-Side Request Forgery (SSRF) Leading to Information Disclosure in AOS-CX
Assigned by hpe
Sep 1, 2026
CVE-2026-73756Medium 5.9Unauthenticated Sensitive Information Disclosure via Man-in-the-Middle in AOS-CX via API Endpoint
Assigned by hpe
Sep 1, 2026
CVE-2026-73755Medium 5.7Privilege Escalation via Unauthorized Access to Sensitive Session Information
Assigned by hpe
Sep 1, 2026
CVE-2026-73754Medium 5.3Authenticated Denial-of-Service Vulnerabilities in the Command Line Interface of AOS-CX
Assigned by hpe
Sep 1, 2026
CVE-2026-73753High 8.8Authenticated Remote Command Injection Vulnerabilities in AOS-CX Command Line Interface
Assigned by hpe
Sep 1, 2026
CVE-2026-73752High 8.8Unauthenticated Arbitrary File Write Vulnerability Leads to Remote Code Execution in AOS-CX
Assigned by hpe
Sep 1, 2026
CVE-2026-73751High 8.8Authenticated Remote Command Injection in AOS-CX Web-based Management Interface
Assigned by hpe
Sep 1, 2026
CVE-2026-73750High 8.8Authenticated Buffer Overflow Vulnerabilities in AOS-CX API Endpoint Leads to Possible Code Execution
Assigned by hpe
Sep 1, 2026
CVE-2026-73749Critical 9.8Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-CX
Assigned by hpe
Sep 1, 2026

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.