CVE-2026-73774 — Unauthenticated Buffer Overflow Vulnerability leads to Sensitive Information Disclosure in AOS-CX

Description (CNA)

A buffer overflow vulnerability exists in the underlying operating system of AOS-CX that could lead to unauthenticated disclosure of sensitive information by sending specially crafted packets to the affected system. Successful exploitation of this vulnerability could result in limited disclosure or modification of information and disruption of the affected system.

Affected (CNA)

Vendor / product	Versions
Hewlett Packard Enterprise (HPE) / AOS-CX	affected 10.18.0000 through 10.18.0001; affected 10.17.0000 through 10.17.1021; affected 10.16.0000 through 10.16.1051; affected 10.13.0000 through 10.13.1180; affected 10.10.0000 through 10.10.1180

CWE

No CWE identifiers supplied.

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05134en_us&docLocale=en_US

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.