Skip to content
OpenAdvisories
Medium · 5.9 CVE-2026-73756 EUVD-2026-69620GHSA-34pg-qqrj-463j

Unauthenticated Sensitive Information Disclosure via Man-in-the-Middle in AOS-CX via API Endpoint

Published Sep 1, 2026 · Updated Sep 2, 2026 · Assigned by hpe

Description

A vulnerability in an API endpoint of AOS-CX could allow a remote unauthenticated attacker to obtain sensitive information via a man-in-the-middle attack. Successful exploitation allows an attacker to retrieve data which could be used to further compromise the confidentiality of the affected system.

Affected products

VendorProductAffectedFixed
Hewlett Packard Enterprise (HPE) AOS-CX 10.18.0000 – ≤ 10.18.0001, 10.17.0000 – ≤ 10.17.1021, 10.16.0000 – ≤ 10.16.1051, 10.13.0000 – ≤ 10.13.1180, 10.10.0000 – ≤ 10.10.1180 —

Advisories 1

References