CVE-2026-73765

Published: Sep 1, 2026Modified: Sep 4, 2026

7.2

Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.2 / Impact: 5.9

Source: security-alert@hpe.com (Secondary)

Description

Authenticated path traversal vulnerabilities exist in API endpoints of AOS-CX. Successful exploitation of these vulnerabilities allows an attacker to write arbitrary files to the underlying operating system, which could lead to remote code execution.

Affected (5)

Products: Hpe: Arubaos Cx

Hpe

1 product

Arubaos Cx

Configuration A

5 vulnerable · 155 platform

Vulnerable Software	Affected Versions
Hpe Arubaos Cx	Up to 10.10.1180
Hpe Arubaos Cx	From 10.13.0000 to 10.13.1180
Hpe Arubaos Cx	From 10.16.0000 to 10.16.1051
Hpe Arubaos Cx	From 10.17.0000 to 10.17.1021
Hpe Arubaos Cx	Version 10.18.0001

Running on/with	Platform Versions
Hpe Aruba Cx 10000 48y6c (r8p13a)	All versions
Hpe Aruba Cx 10000 48y6c (r8p14a)	All versions
Hpe Aruba Cx 10000 48y6c (s0f98a)	All versions
Hpe Aruba Cx 10040 (s4r58a)	All versions
Hpe Aruba Cx 10040 32p (s4r54a)	All versions
Hpe Aruba Cx 10040 32p (s4r55a)	All versions
Hpe Aruba Cx 10040 32p (s4r56a)	All versions
Hpe Aruba Cx 4100i 12 Port (jl817a)	All versions
Hpe Aruba Cx 4100i 24 Port (jl818a)	All versions
Hpe Aruba Cx 6000 12g (r8n89a)	All versions
Hpe Aruba Cx 6000 12p (r8n89b)	All versions
Hpe Aruba Cx 6000 12p (s4r21a)	All versions
Hpe Aruba Cx 6000 24g (r8n87a)	All versions
Hpe Aruba Cx 6000 24g (r8n88a)	All versions
Hpe Aruba Cx 6000 24p (r8n87b)	All versions
Hpe Aruba Cx 6000 24p (r8n88b)	All versions
Hpe Aruba Cx 6000 24p (s4r26a)	All versions
Hpe Aruba Cx 6000 24p (s4r27a)	All versions
Hpe Aruba Cx 6000 48g (r8n85a)	All versions
Hpe Aruba Cx 6000 48g (r8n86a)	All versions
Hpe Aruba Cx 6000 48g (r9y03a)	All versions
Hpe Aruba Cx 6000 48p (r8n85b)	All versions
Hpe Aruba Cx 6000 48p (r8n86b)	All versions
Hpe Aruba Cx 6000 48p (r9y03b)	All versions
Hpe Aruba Cx 6000 48p (s4r20a)	All versions
Hpe Aruba Cx 6000 48p (s4r24a)	All versions
Hpe Aruba Cx 6000 48p (s4r25a)	All versions
Hpe Aruba Cx 6000 8p (s4r22a)	All versions
Hpe Aruba Cx 6000 8p (s4r23a)	All versions
Hpe Aruba Cx 6000 8p (s4r28a)	All versions
Hpe Aruba Cx 6000 8p (s4r29a)	All versions
Hpe Aruba Cx 6100 12g (jl679a)	All versions
Hpe Aruba Cx 6100 24g (jl677a)	All versions
Hpe Aruba Cx 6100 24g (jl678a)	All versions
Hpe Aruba Cx 6100 48g (jl675a)	All versions
Hpe Aruba Cx 6100 48g (jl676a)	All versions
Hpe Aruba Cx 6100 48g (r9y04a)	All versions
Hpe Aruba Cx 6200f 12g (r8q72a)	All versions
Hpe Aruba Cx 6200f 12g (r8v13a)	All versions
Hpe Aruba Cx 6200f 24g (jl724b)	All versions
Hpe Aruba Cx 6200f 24g (jl725b)	All versions
Hpe Aruba Cx 6200f 24g (s0g13a)	All versions
Hpe Aruba Cx 6200f 24g (s0g14a)	All versions
Hpe Aruba Cx 6200f 24g (s0m81a)	All versions
Hpe Aruba Cx 6200f 24g (s0m82a)	All versions
Hpe Aruba Cx 6200f 24g (s0m86a)	All versions
Hpe Aruba Cx 6200f 24g (s0m87a)	All versions
Hpe Aruba Cx 6200f 48g (jl726b)	All versions
Hpe Aruba Cx 6200f 48g (jl727b)	All versions
Hpe Aruba Cx 6200f 48g (jl728b)	All versions
Hpe Aruba Cx 6200f 48g (s0g15a)	All versions
Hpe Aruba Cx 6200f 48g (s0g16a)	All versions
Hpe Aruba Cx 6200f 48g (s0g17a)	All versions
Hpe Aruba Cx 6200f 48g (s0m83a)	All versions
Hpe Aruba Cx 6200f 48g (s0m84a)	All versions
Hpe Aruba Cx 6200f 48g (s0m85a)	All versions
Hpe Aruba Cx 6200f 48g (s0m88a)	All versions
Hpe Aruba Cx 6200f 48g (s0m89a)	All versions
Hpe Aruba Cx 6200f 48g (s0m90a)	All versions
Hpe Aruba Cx 6200m 24g (r8q67a)	All versions
Hpe Aruba Cx 6200m 24g (r8q68a)	All versions
Hpe Aruba Cx 6200m 24g (r8v08a)	All versions
Hpe Aruba Cx 6200m 24g (r8v09a)	All versions
Hpe Aruba Cx 6200m 36g (r8q71a)	All versions
Hpe Aruba Cx 6200m 36g (r8v12a)	All versions
Hpe Aruba Cx 6200m 48g (r8q69a)	All versions
Hpe Aruba Cx 6200m 48g (r8q70a)	All versions
Hpe Aruba Cx 6200m 48g (r8v10a)	All versions
Hpe Aruba Cx 6200m 48g (r8v11a)	All versions
Hpe Aruba Cx 6300f 24 (jl666a)	All versions
Hpe Aruba Cx 6300f 24 (jl668a)	All versions
Hpe Aruba Cx 6300f 24p (s0g96a)	All versions
Hpe Aruba Cx 6300f 24p (s0g98a)	All versions
Hpe Aruba Cx 6300f 48 (jl665a)	All versions
Hpe Aruba Cx 6300f 48 (jl667a)	All versions
Hpe Aruba Cx 6300f 48p (s0g95a)	All versions
Hpe Aruba Cx 6300f 48p (s0g97a)	All versions
Hpe Aruba Cx 6300m 16p (s4p41a)	All versions
Hpe Aruba Cx 6300m 16p (s4p45a)	All versions
Hpe Aruba Cx 6300m 24 (jl658a)	All versions
Hpe Aruba Cx 6300m 24 (jl660a)	All versions
Hpe Aruba Cx 6300m 24 (jl662a)	All versions
Hpe Aruba Cx 6300m 24 (jl664a)	All versions
Hpe Aruba Cx 6300m 24p (r8s89a)	All versions
Hpe Aruba Cx 6300m 24p (r8s92a)	All versions
Hpe Aruba Cx 6300m 24p (s0f99a)	All versions
Hpe Aruba Cx 6300m 24p (s0g01a)	All versions
Hpe Aruba Cx 6300m 24p (s0g03a)	All versions
Hpe Aruba Cx 6300m 24p (s0g05a)	All versions
Hpe Aruba Cx 6300m 24p (s4p44a)	All versions
Hpe Aruba Cx 6300m 24p (s4p48a)	All versions
Hpe Aruba Cx 6300m 24p (s5z46a)	All versions
Hpe Aruba Cx 6300m 32p (s4p42a)	All versions
Hpe Aruba Cx 6300m 32p (s4p46a)	All versions
Hpe Aruba Cx 6300m 48 (jl659a)	All versions
Hpe Aruba Cx 6300m 48 (jl661a)	All versions
Hpe Aruba Cx 6300m 48 (jl663a)	All versions
Hpe Aruba Cx 6300m 48 (jl762a)	All versions
Hpe Aruba Cx 6300m 48p (r8s90a)	All versions
Hpe Aruba Cx 6300m 48p (s0g00a)	All versions
Hpe Aruba Cx 6300m 48p (s0g02a)	All versions
Hpe Aruba Cx 6300m 48p (s0g04a)	All versions
Hpe Aruba Cx 6300m 48p (s0g06a)	All versions
Hpe Aruba Cx 6300m 48p (s0x44a)	All versions
Hpe Aruba Cx 6300m 48p (s4p43a)	All versions
Hpe Aruba Cx 6300m 48p (s4p47a)	All versions
Hpe Aruba Cx 6300m 48sr5 (r8s91a)	All versions
Hpe Aruba Cx 6405 (r0x26a)	All versions
Hpe Aruba Cx 6405 48sfp+8sfp56 (r0x30a)	All versions
Hpe Aruba Cx 6405 96g (r0x29a)	All versions
Hpe Aruba Cx 6405 V2 (r0x26c)	All versions
Hpe Aruba Cx 6410 (r0x27a)	All versions
Hpe Aruba Cx 6410 96g (jl741a)	All versions
Hpe Aruba Cx 6410 V2 (r0x27c)	All versions
Hpe Aruba Cx 8320 32 (jl579a)	All versions
Hpe Aruba Cx 8320 48 (jl479a)	All versions
Hpe Aruba Cx 8320 48 (jl581a)	All versions
Hpe Aruba Cx 8325 32c (jl626a)	All versions
Hpe Aruba Cx 8325 32c (jl627a)	All versions
Hpe Aruba Cx 8325 48y8c (jl624a)	All versions
Hpe Aruba Cx 8325 48y8c (jl625a)	All versions
Hpe Aruba Cx 8325 48y8c (jl858a)	All versions
Hpe Aruba Cx 8325h 16c (s4b22a)	All versions
Hpe Aruba Cx 8325h 16c (s4b24a)	All versions
Hpe Aruba Cx 8325h 18y4c (s4b21a)	All versions
Hpe Aruba Cx 8325h 18y4c (s4b23a)	All versions
Hpe Aruba Cx 8325p 32c (s0g07a)	All versions
Hpe Aruba Cx 8325p 32c (s0g08a)	All versions
Hpe Aruba Cx 8360 12c (jl708c)	All versions
Hpe Aruba Cx 8360 12c (jl709c)	All versions
Hpe Aruba Cx 8360 16y2c (jl702c)	All versions
Hpe Aruba Cx 8360 16y2c (jl703c)	All versions
Hpe Aruba Cx 8360 24xf2c (jl710c)	All versions
Hpe Aruba Cx 8360 24xf2c (jl711c)	All versions
Hpe Aruba Cx 8360 32y4c (jl700c)	All versions
Hpe Aruba Cx 8360 32y4c (jl701c)	All versions
Hpe Aruba Cx 8360 48xt4c (jl706c)	All versions
Hpe Aruba Cx 8360 48xt4c (jl707c)	All versions
Hpe Aruba Cx 8360 48y6c (jl704c)	All versions
Hpe Aruba Cx 8360 48y6c (jl705c)	All versions
Hpe Aruba Cx 8400 (jl376a)	All versions
Hpe Aruba Cx 8400 8 Slot Chassis (jl375a)	All versions
Hpe Aruba Cx 9300 (r8z97a)	All versions
Hpe Aruba Cx 9300 (r8z98a)	All versions
Hpe Aruba Cx 9300 (r8z99a)	All versions
Hpe Aruba Cx 9300 (r9a00a)	All versions
Hpe Aruba Cx 9300 32d (r8z96a)	All versions
Hpe Aruba Cx 9300 32d (r9a29a)	All versions
Hpe Aruba Cx 9300 32d (r9a30a)	All versions
Hpe Aruba Cx 9300s 32p (s0f81a)	All versions
Hpe Aruba Cx 9300s 32p (s0f82a)	All versions
Hpe Aruba Cx 9300s 32p (s0f83a)	All versions
Hpe Aruba Cx 9300s 32p (s0f84a)	All versions
Hpe Aruba Cx 9300s 32p (s0f87a)	All versions
Hpe Aruba Cx 9300s 32p (s0f88a)	All versions

Related CWEs

CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

References (1)

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05134en_us&docLocale=en_US

Source: security-alert@hpe.com

PatchVendor Advisory

Timeline

No history available yet.