CVE-2026-73753: Vulnerability in Hewlett Packard Enterprise (HPE) AOS-CX

This vulnerability in HPE AOS-CX involves command injection through affected command-line operations. An authenticated user with low privileges can exploit this flaw to execute arbitrary commands as a privileged user on the underlying OS. The CVSS 3.1 base score is 8.8, indicating high impact on confidentiality, integrity, and availability. The vulnerability is tracked as CWE-78 (Improper Neutralization of Special Elements used in an OS Command). Affected versions explicitly include 10.10.0000, 10.13.0000, 10.16.0000, 10.17.0000, and 10.18.0000. No patch or official remediation level has been published by the vendor as of the data provided.

Successful exploitation allows privilege escalation from a low-privileged authenticated user to execute arbitrary commands as a privileged user on the underlying operating system. This can lead to full system compromise, including unauthorized access, data modification, and disruption of service.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the affected command-line interfaces to trusted users only and monitor for suspicious activity. Do not rely on generic mitigations unless specifically recommended by HPE.