CVE-2026-73762: Vulnerability in Hewlett Packard Enterprise (HPE) AOS-CX

CVE-2026-73762 is an access control vulnerability in the API endpoint of HPE AOS-CX. It enables a remote actor with high privileges to circumvent configured access control policies, potentially gaining unauthorized access to management functionality. The vulnerability is identified in specific versions of AOS-CX, and no official remediation or patch information is currently available. The CVSS 3.1 base score is 6.6, reflecting a medium severity with network attack vector, low attack complexity, required high privileges, no user interaction, and impacts on confidentiality, integrity, and availability.

The vulnerability could allow an attacker with high privileges to bypass access controls and access management functions that should be restricted. This may lead to partial compromise of confidentiality, integrity, and availability of the affected system's management capabilities. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or workaround is provided, monitor HPE advisories for updates and consider restricting network access to the affected API endpoints as a precaution.