Skip to content
OpenAdvisories
High · 7.3 CVE-2026-73770 EUVD-2026-69633GHSA-hm5v-gf2c-fpqw

Authenticated Arbitrary File Write Vulnerability Leading to Remote Code Execution in AOS-CX

Published Sep 1, 2026 · Updated Sep 3, 2026 · Assigned by hpe

Description

An authenticated arbitrary file write vulnerability exists in AOS-CX. Successful exploitation could allow an authenticated malicious actor, under specific conditions outside the attacker's control and following a required action by another user, to create or modify arbitrary files and execute arbitrary commands as a privileged user on the underlying operating system.

Affected products

VendorProductAffectedFixed
Hewlett Packard Enterprise (HPE) AOS-CX 10.18.0000 – ≤ 10.18.0001, 10.17.0000 – ≤ 10.17.1021, 10.16.0000 – ≤ 10.16.1051, 10.13.0000 – ≤ 10.13.1180, 10.10.0000 – ≤ 10.10.1180 —

Advisories 2

References