CVE-2026-73768: Vulnerability in Hewlett Packard Enterprise (HPE) AOS-CX

CVE-2026-73768 is a vulnerability in the command line interface of HPE AOS-CX that may allow improper processing of malformed input. Successful exploitation could lead to arbitrary command execution with root privileges. The vulnerability is classified under CWE-20 (Improper Input Validation). It affects specific versions of AOS-CX, including 10.10.0000, 10.13.0000, 10.16.0000, 10.17.0000, and 10.18.0000. The CVSS v3.1 base score is 7.3, indicating high severity, with attack vector local, low attack complexity, low privileges required, and user interaction required. Confidentiality, integrity, and availability impacts are all high. No vendor advisory or patch information is currently available.

If exploited, this vulnerability could allow an attacker with local access and low privileges to execute arbitrary commands as root on affected HPE AOS-CX systems. This could lead to full system compromise, including unauthorized disclosure, modification, or destruction of data and disruption of service.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict local access to trusted users only and monitor for suspicious activity related to command line interface usage.