CVE-2026-73771: Vulnerability in Hewlett Packard Enterprise (HPE) AOS-CX

This vulnerability in HPE AOS-CX affects the management interface and API by improper authentication processing. An unauthenticated remote attacker may exploit this flaw to bypass authentication or cause resource exhaustion, resulting in unauthorized access or denial of service. The CVSS 3.1 base score is 7.5, indicating high severity with network attack vector, high attack complexity, no privileges required, and user interaction required. The vulnerability is identified as CWE-287 (Improper Authentication). No known exploits are reported in the wild, and no vendor advisory or patch information is currently provided.

Successful exploitation can lead to unauthorized access to the management interface or denial of service, impacting confidentiality, integrity, and availability of the affected system. This could allow attackers to control or disrupt management operations on HPE AOS-CX devices.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the management interface to trusted networks and monitor for suspicious activity. Avoid exposing the management interface to untrusted networks.