CVE-2026-73757: Vulnerability in Hewlett Packard Enterprise (HPE) AOS-CX

This vulnerability (CVE-2026-73757) affects the web-based management interface of HPE AOS-CX. An authenticated remote attacker can exploit a server-side request forgery (SSRF) flaw to gather information about the internal structure of the AOS-CX host. The attack can result in limited disclosure and modification of sensitive information. The CVSS 3.1 base score is 6.4 (medium severity), reflecting network attack vector, low attack complexity, required privileges, no user interaction, and impact on confidentiality and integrity but not availability. No vendor advisory or patch information is currently provided.

An authenticated attacker can leverage this SSRF vulnerability to enumerate internal host structure details, potentially disclosing sensitive information and enabling limited modification of such data. This could aid further attacks or unauthorized access within the affected system. There is no indication of availability impact or widespread exploitation in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict authenticated user privileges to trusted personnel only and monitor for suspicious activity related to the management interface. Avoid exposing the management interface to untrusted networks.