CVE-2026-73783: Vulnerability in Hewlett Packard Enterprise (HPE) AOS-CX

CVE-2026-73783 is a stack overflow vulnerability in an API endpoint of HPE AOS-CX. An authenticated malicious actor could exploit this flaw to trigger a denial-of-service condition by causing the system to crash or become unresponsive. The vulnerability affects specific versions of AOS-CX, including 10.10.0000, 10.13.0000, 10.16.0000, 10.17.0000, and 10.18.0000. The CVSS v3.1 base score is 4.9, reflecting network attack vector, low attack complexity, high privileges required, no user interaction, unchanged scope, no confidentiality or integrity impact, and high impact on availability. No patch or official remediation level has been published by HPE as of the data provided.

Successful exploitation results in denial-of-service, causing the affected system to become unavailable. There is no impact on confidentiality or integrity. The attack requires authenticated access with high privileges, limiting the attack surface to trusted users or administrators. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the affected API endpoints to trusted administrators only and monitor for unusual activity. No vendor-provided mitigation or temporary fix is currently available.