CVE-2026-73750: Vulnerability in Hewlett Packard Enterprise (HPE) AOS-CX

CVE-2026-73750 describes vulnerabilities in the authentication module of HPE AOS-CX. The module may improperly process malformed or truncated input provided by an authenticated remote attacker, potentially from a compromised or hostile authentication server. Successful exploitation can cause denial-of-service conditions or enable remote code execution with elevated privileges. The vulnerability is classified under CWE-284 (Improper Access Control) and has a CVSS v3.1 base score of 8.8 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Affected versions explicitly include =10.10.0000, =10.13.0000, =10.16.0000, =10.17.0000, and =10.18.0000. No patch or official remediation level is currently documented, and no known exploits in the wild have been reported.

An authenticated remote attacker can exploit this vulnerability by sending specially crafted malformed or truncated input to the authentication module. This can result in denial-of-service or remote code execution with elevated privileges, potentially compromising the affected system's confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level is provided, organizations should monitor HPE advisories for updates. Until a patch is available, limit access to trusted authentication servers and restrict authenticated access to minimize exposure.