CVE-2026-73774: Vulnerability in Hewlett Packard Enterprise (HPE) AOS-CX

This vulnerability (CVE-2026-73774) is a buffer overflow in the underlying operating system of HPE AOS-CX. An attacker can exploit this by sending specially crafted packets to the system without authentication, potentially leading to limited information disclosure, modification of data, and disruption of system operations. The CVSS v3.1 score is 7.6 (high), reflecting network attack vector, low attack complexity, no privileges required, no user interaction, and impacts on confidentiality, integrity, and availability. The affected versions are explicitly listed as =10.10.0000, =10.13.0000, =10.16.0000, =10.17.0000, and =10.18.0000. There is no vendor advisory or patch information provided, and no known exploits in the wild have been reported.

Successful exploitation can lead to limited disclosure and modification of sensitive information and cause disruption to the affected system. The impact affects confidentiality, integrity, and availability to varying degrees as indicated by the CVSS vector.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary mitigation is provided in the available data. Until a patch is available, monitor vendor communications for updates.