CVE-2026-73762 — Authorization Bypass in the API Endpoint of AOS-CX Leads to Unauthorized Access

CVE-2026-73762

Authorization Bypass in the API Endpoint of AOS-CX Leads to Unauthorized Access PUBLISHED

Description (CNA)

A vulnerability has been identified in the API endpoint of AOS-CX that could allow a remote actor to circumvent existing access controls. In some cases this could enable unauthorized access to management functionality that should be restricted by the configured access control policy.

Affected (CNA)

Vendor / product	Versions
Hewlett Packard Enterprise (HPE) / AOS-CX	affected 10.18.0000 through 10.18.0001; affected 10.17.0000 through 10.17.1021; affected 10.16.0000 through 10.16.1051; affected 10.13.0000 through 10.13.1180; affected 10.10.0000 through 10.10.1180

CWE

No CWE identifiers supplied.

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05134en_us&docLocale=en_US

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.