CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,476 CVEs published, 358 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
5,476
Show in the list
Critical, last 7 days
358
Show in the list
Healthcare-tagged, last 7 days
4
Show in the list
Known exploited (CISA KEV)
1,747
Show in the list

Showing CVEs that name the product hpe:arubaos-cx. Show all products

48 CVEs, showing 1 to 48
CVESeverityTitlePublished
CVE-2026-73783Medium 4.9Authenticated Stack Overflow Vulnerabilities lead to Denial-of-Service in AOS-CX
Assigned by hpe
Sep 1, 2026
CVE-2026-73782High 8.8Unauthenticated Format String Vulnerability leads to Remote Code Execution in AOS-CX
Assigned by hpe
Sep 1, 2026
CVE-2026-73781High 8.4Authenticated Stored Cross-Site Scripting Vulnerability (XSS) in AOS-CX Web-Based Management Interface
Assigned by hpe
Sep 1, 2026
CVE-2026-73780High 8.3Lack of Cross-Site Request Forgery (CSRF) Protections for Certificate-Authenticated Sessions in AOS-CX
Assigned by hpe
Sep 1, 2026
CVE-2026-73779High 8.2Authentication Bypass Vulnerabilities Leading to Information Disclosure, Unauthorized Modification, and Service Disruption in AOS-CX
Assigned by hpe
Sep 1, 2026
CVE-2026-73778High 8.1Credential Manager Vulnerability Allows Unauthorized Administrative Access
Assigned by hpe
Sep 1, 2026
CVE-2026-73777High 8.1Authorization Bypass Vulnerabilities Leading to Privilege Escalation in AOS-CX API Endpoint
Assigned by hpe
Sep 1, 2026
CVE-2026-73776High 7.9Authenticated Signature Verification Bypass Leading to Arbitrary Code Execution in AOS-CX
Assigned by hpe
Sep 1, 2026
CVE-2026-73775High 7.7Authenticated Sensitive Information Disclosure Vulnerabilities in AOS-CX
Assigned by hpe
Sep 1, 2026
CVE-2026-73774High 7.6Unauthenticated Buffer Overflow Vulnerability leads to Sensitive Information Disclosure in AOS-CX
Assigned by hpe
Sep 1, 2026
CVE-2026-73773High 7.5Unauthenticated Denial-of-Service (DoS) Vulnerability in AOS-CX
Assigned by hpe
Sep 1, 2026
CVE-2026-73772Medium 6.5Unauthenticated Buffer Overflow Vulnerabilities lead to Denial-of-Service in AOS-CX
Assigned by hpe
Sep 1, 2026
CVE-2026-73771High 7.5Improper Authentication Handling in AOS-CX Management Interface and API
Assigned by hpe
Sep 1, 2026
CVE-2026-73770High 7.3Authenticated Arbitrary File Write Vulnerability Leading to Remote Code Execution in AOS-CX
Assigned by hpe
Sep 1, 2026
CVE-2026-73768High 7.3Local Privilege Escalation in AOS-CX Command Line Interface
Assigned by hpe
Sep 1, 2026
CVE-2026-73767High 7.2Authenticated Remote Command Injection Vulnerabilities in AOS-CX Command Line Interface
Assigned by hpe
Sep 1, 2026
CVE-2026-73766High 7.2Authenticated Command Injection Vulnerabilities in the API Endpoint of AOS-CX
Assigned by hpe
Sep 1, 2026
CVE-2026-73765High 7.2Authenticated Path Traversal Vulnerabilities Lead to Remote Code Execution in AOS-CX
Assigned by hpe
Sep 1, 2026
CVE-2026-73764High 7.1Authentication Bypass Vulnerabilities Leading to Unauthorized Modification and Service Disruption in AOS-CX
Assigned by hpe
Sep 1, 2026
CVE-2026-73763High 7.1Unauthenticated Remote Command Execution in Management Component
Assigned by hpe
Sep 1, 2026
CVE-2026-73762Medium 6.6Authorization Bypass in the API Endpoint of AOS-CX Leads to Unauthorized Access
Assigned by hpe
Sep 1, 2026
CVE-2026-73761Medium 6.5Unauthenticated Out-of-Bounds Read Vulnerability leads to Information Disclosure in AOS-CX
Assigned by hpe
Sep 1, 2026
CVE-2026-73760Medium 6.5Authenticated Path Traversal Vulnerability Leads to Remote Unauthorized Access to Files in AOS-CX
Assigned by hpe
Sep 1, 2026
CVE-2026-73759Medium 6.5Unauthenticated Denial-of-Service Vulnerabilities in AOS-CX
Assigned by hpe
Sep 1, 2026
CVE-2026-73758Medium 6.5Authenticated Privilege Escalation Vulnerability via Broken Access Control in AOS-CX
Assigned by hpe
Sep 1, 2026
CVE-2026-73757Medium 6.4Authenticated Server-Side Request Forgery (SSRF) Leading to Information Disclosure in AOS-CX
Assigned by hpe
Sep 1, 2026
CVE-2026-73756Medium 5.9Unauthenticated Sensitive Information Disclosure via Man-in-the-Middle in AOS-CX via API Endpoint
Assigned by hpe
Sep 1, 2026
CVE-2026-73755Medium 5.7Privilege Escalation via Unauthorized Access to Sensitive Session Information
Assigned by hpe
Sep 1, 2026
CVE-2026-73754Medium 5.3Authenticated Denial-of-Service Vulnerabilities in the Command Line Interface of AOS-CX
Assigned by hpe
Sep 1, 2026
CVE-2026-73753High 8.8Authenticated Remote Command Injection Vulnerabilities in AOS-CX Command Line Interface
Assigned by hpe
Sep 1, 2026
CVE-2026-73752High 8.8Unauthenticated Arbitrary File Write Vulnerability Leads to Remote Code Execution in AOS-CX
Assigned by hpe
Sep 1, 2026
CVE-2026-73751High 8.8Authenticated Remote Command Injection in AOS-CX Web-based Management Interface
Assigned by hpe
Sep 1, 2026
CVE-2026-73750High 8.8Authenticated Buffer Overflow Vulnerabilities in AOS-CX API Endpoint Leads to Possible Code Execution
Assigned by hpe
Sep 1, 2026
CVE-2026-73749Critical 9.8Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-CX
Assigned by hpe
Sep 1, 2026
CVE-2026-63454High 7.2An authenticated path traversal vulnerability exists in AOS-CX.Jul 21, 2026
CVE-2026-63453High 7.2Buffer overflow vulnerabilities exist in the command line interface of AOS-CX.Jul 21, 2026
CVE-2026-44880High 8.8A buffer overflow vulnerability was found in the command line interface of AOS-CX.Jul 21, 2026
CVE-2026-23817Medium 6.1A vulnerability in the web-based management interface of AOS-CX Switches could allow an unauthenticated remote attacker to redirect users to an arbitrary URL.Mar 11, 2026
CVE-2026-23816High 8.8A vulnerability in the command line interface of AOS-CX Switches could allow an authenticated remote attacker to execute arbitrary commands on the underlying operating system.Mar 11, 2026
CVE-2026-23815High 7.2A vulnerability in a custom binary used in AOS-CX Switches' CLI could allow an authenticated remote attacker with high privileges to perform command injection.Mar 11, 2026
CVE-2026-23814High 8.8A vulnerability in the command parameters of a certain AOS-CX CLI command could allow a low-privilege authenticated remote attacker to inject malicious commands resulting in unwanted behavior.Mar 11, 2026
CVE-2026-23813Critical 9.8A vulnerability has been identified in the web-based management interface of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumvent existing authentication control…Mar 11, 2026
CVE-2025-37160Medium 6.5A broken access control (BAC) vulnerability in the web-based management interface could allow an authenticated remote attacker with low privileges to view sensitive information.Nov 18, 2025
CVE-2025-37159High 7.3A vulnerability in the web management interface of the AOS-CX OS user authentication service could allow an authenticated remote attacker to hijack an active user session.Nov 18, 2025
CVE-2025-37158High 8.8A command injection vulnerability exists in the AOS-CX Operating System.Nov 18, 2025
CVE-2025-37157High 8.8A command injection vulnerability exists in the AOS-CX Operating System.Nov 18, 2025
CVE-2025-37156Medium 6.8A platform-level denial-of-service (DoS) vulnerability exists in ArubaOS-CX software.Nov 18, 2025
CVE-2025-37155High 7.8A vulnerability in the SSH restricted shell interface of the network management services allows improper access control for authenticated read-only users.Nov 18, 2025

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.