A buffer overflow vulnerability exists in the underlying operating system of AOS-CX that could lead to unauthenticated disclosure of sensitive… (CVE-2026-73774)

CVE-2026-73774 is a buffer overflow vulnerability in the underlying OS of AOS-CX. Exploitation requires no privileges or user interaction and can be triggered remotely via specially crafted packets. Successful exploitation can cause limited confidentiality and integrity loss, as well as high impact on system availability.

The vulnerability can result in unauthenticated disclosure of sensitive information, limited modification of information, and disruption (denial of service) of the affected system. The CVSS score of 7.6 (high) reflects the significant impact on confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch information is provided in the available data.