CVE-2026-73750 — Authenticated Buffer Overflow Vulnerabilities in AOS-CX API Endpoint Leads to Possible Code Execution

Description (CNA)

Vulnerabilities exist in the authentication module that may improperly process malformed or truncated input. An authenticated remote attacker could exploit these vulnerabilities by providing specially crafted input from a compromised or hostile authentication server. Successful exploitation could result in a Denial-of-Service or potential remote code execution with elevated privileges.

Affected (CNA)

Vendor / product	Versions
Hewlett Packard Enterprise (HPE) / AOS-CX	affected 10.18.0000 through 10.18.0001; affected 10.17.0000 through 10.17.1021; affected 10.16.0000 through 10.16.1051; affected 10.13.0000 through 10.13.1180; affected 10.10.0000 through 10.10.1180

CWE

No CWE identifiers supplied.

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05134en_us&docLocale=en_US

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.