GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration
Search

Find a vulnerability

Search criteria Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.

    1649 vulnerabilities

    CVE-2026-76677 (GCVE-0-2026-76677)

    Vulnerability from cvelistv5 – Published: 2026-09-15 19:23 – Updated: 2026-09-15 19:23
    VLAI
    Title
    Authorization Bypass Leading to Privilege Escalation in HPE Networking EdgeConnect SD-WAN Gateways
    Summary
    A privilege escalation vulnerability exists in the API of EdgeConnect SD-WAN Gateways. Successful exploitation could allow a remote low-privileged authenticated user to achieve administrative privilege on the web-management interface leading to complete system compromise.
    Assigner
    Impacted products
    Vendor Product Version
    Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways Affected: 9.7.0.0 , ≤ 9.7.0.0 (semver)
    Affected: 9.6.0.0 , ≤ 9.6.3.1 (semver)
    Affected: 9.5.0.0 , ≤ 9.5.8.1 (semver)
    Affected: 9.4.0.0 , ≤ 9.4.8.2 (semver)
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "cna": {
          "affected": [
            {
              "defaultStatus": "affected",
              "product": "EdgeConnect SD-WAN Gateways",
              "vendor": "Hewlett Packard Enterprise (HPE)",
              "versions": [
                {
                  "lessThanOrEqual": "9.7.0.0",
                  "status": "affected",
                  "version": "9.7.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "9.6.3.1",
                  "status": "affected",
                  "version": "9.6.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "9.5.8.1",
                  "status": "affected",
                  "version": "9.5.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "9.4.8.2",
                  "status": "affected",
                  "version": "9.4.0.0",
                  "versionType": "semver"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "reporter",
              "value": "Internal security research (HPE Networking)."
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "A privilege escalation vulnerability exists in the API of EdgeConnect SD-WAN Gateways. Successful exploitation could allow a remote low-privileged authenticated user to achieve administrative privilege on the web-management interface leading to complete system compromise."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 8.8,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-09-15T19:23:37.869Z",
            "orgId": "eb103674-0d28-4225-80f8-39fb86215de0",
            "shortName": "hpe"
          },
          "references": [
            {
              "url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05135en_us\u0026docLocale=en_US"
            }
          ],
          "source": {
            "advisory": "HPESBNW05135",
            "discovery": "INTERNAL"
          },
          "title": "Authorization Bypass Leading to Privilege Escalation in HPE Networking EdgeConnect SD-WAN Gateways",
          "x_generator": {
            "engine": "Vulnogram 0.2.0"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "eb103674-0d28-4225-80f8-39fb86215de0",
        "assignerShortName": "hpe",
        "cveId": "CVE-2026-76677",
        "datePublished": "2026-09-15T19:23:37.869Z",
        "dateReserved": "2026-08-19T16:11:18.067Z",
        "dateUpdated": "2026-09-15T19:23:37.869Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-76676 (GCVE-0-2026-76676)

    Vulnerability from cvelistv5 – Published: 2026-09-15 19:23 – Updated: 2026-09-15 19:23
    VLAI
    Title
    Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in EdgeConnect SD-WAN Gateways
    Summary
    Buffer overflow vulnerabilities exist in the underlying operating system of EdgeConnect SD-WAN Gateways that could allow an unauthenticated adjacent attacker to execute arbitrary code if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system leading to complete system compromise.
    Assigner
    Impacted products
    Vendor Product Version
    Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways Affected: 9.7.0.0 , ≤ 9.7.0.0 (semver)
    Affected: 9.6.0.0 , ≤ 9.6.3.1 (semver)
    Affected: 9.5.0.0 , ≤ 9.5.8.1 (semver)
    Affected: 9.4.0.0 , ≤ 9.4.8.2 (semver)
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "cna": {
          "affected": [
            {
              "defaultStatus": "affected",
              "product": "EdgeConnect SD-WAN Gateways",
              "vendor": "Hewlett Packard Enterprise (HPE)",
              "versions": [
                {
                  "lessThanOrEqual": "9.7.0.0",
                  "status": "affected",
                  "version": "9.7.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "9.6.3.1",
                  "status": "affected",
                  "version": "9.6.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "9.5.8.1",
                  "status": "affected",
                  "version": "9.5.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "9.4.8.2",
                  "status": "affected",
                  "version": "9.4.0.0",
                  "versionType": "semver"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "reporter",
              "value": "Internal security research (HPE Networking)."
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "Buffer overflow vulnerabilities exist in the underlying operating system of EdgeConnect SD-WAN Gateways that could allow an unauthenticated adjacent attacker to execute arbitrary code if certain preconditions outside of the attacker\u0027s control are met. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system leading to complete system compromise."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "ADJACENT_NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 8.8,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-09-15T19:23:37.201Z",
            "orgId": "eb103674-0d28-4225-80f8-39fb86215de0",
            "shortName": "hpe"
          },
          "references": [
            {
              "url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05135en_us\u0026docLocale=en_US"
            }
          ],
          "source": {
            "advisory": "HPESBNW05135",
            "discovery": "INTERNAL"
          },
          "title": "Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in EdgeConnect SD-WAN Gateways",
          "x_generator": {
            "engine": "Vulnogram 0.2.0"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "eb103674-0d28-4225-80f8-39fb86215de0",
        "assignerShortName": "hpe",
        "cveId": "CVE-2026-76676",
        "datePublished": "2026-09-15T19:23:37.201Z",
        "dateReserved": "2026-08-19T16:11:18.067Z",
        "dateUpdated": "2026-09-15T19:23:37.201Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-76675 (GCVE-0-2026-76675)

    Vulnerability from cvelistv5 – Published: 2026-09-15 19:23 – Updated: 2026-09-15 19:23
    VLAI
    Title
    Authenticated Command Injection Vulnerability Leads to Privilege Escalation in EdgeConnect SD-WAN Gateways
    Summary
    A command injection vulnerability exists in the command line interface of EdgeConnect SD-WAN Gateways. Successful exploitation could allow an authenticated remote attacker with high privileges to execute arbitrary commands on the underlying operating system leading to complete system compromise.
    Assigner
    Impacted products
    Vendor Product Version
    Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways Affected: 9.7.0.0 , ≤ 9.7.0.0 (semver)
    Affected: 9.6.0.0 , ≤ 9.6.3.1 (semver)
    Affected: 9.5.0.0 , ≤ 9.5.8.1 (semver)
    Affected: 9.4.0.0 , ≤ 9.4.8.2 (semver)
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "cna": {
          "affected": [
            {
              "defaultStatus": "affected",
              "product": "EdgeConnect SD-WAN Gateways",
              "vendor": "Hewlett Packard Enterprise (HPE)",
              "versions": [
                {
                  "lessThanOrEqual": "9.7.0.0",
                  "status": "affected",
                  "version": "9.7.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "9.6.3.1",
                  "status": "affected",
                  "version": "9.6.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "9.5.8.1",
                  "status": "affected",
                  "version": "9.5.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "9.4.8.2",
                  "status": "affected",
                  "version": "9.4.0.0",
                  "versionType": "semver"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "reporter",
              "value": "Internal security research (HPE Networking)."
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "A command injection vulnerability exists in the command line interface of EdgeConnect SD-WAN Gateways. Successful exploitation could allow an authenticated remote attacker with high privileges to execute arbitrary commands on the underlying operating system leading to complete system compromise."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 9.1,
                "baseSeverity": "CRITICAL",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "HIGH",
                "scope": "CHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-09-15T19:23:36.368Z",
            "orgId": "eb103674-0d28-4225-80f8-39fb86215de0",
            "shortName": "hpe"
          },
          "references": [
            {
              "url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05135en_us\u0026docLocale=en_US"
            }
          ],
          "source": {
            "advisory": "HPESBNW05135",
            "discovery": "INTERNAL"
          },
          "title": "Authenticated Command Injection Vulnerability Leads to Privilege Escalation in EdgeConnect SD-WAN Gateways",
          "x_generator": {
            "engine": "Vulnogram 0.2.0"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "eb103674-0d28-4225-80f8-39fb86215de0",
        "assignerShortName": "hpe",
        "cveId": "CVE-2026-76675",
        "datePublished": "2026-09-15T19:23:36.368Z",
        "dateReserved": "2026-08-19T16:11:18.067Z",
        "dateUpdated": "2026-09-15T19:23:36.368Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-76674 (GCVE-0-2026-76674)

    Vulnerability from cvelistv5 – Published: 2026-09-15 19:23 – Updated: 2026-09-15 19:23
    VLAI
    Title
    Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in HPE Networking EdgeConnect SD-WAN Gateways
    Summary
    Buffer overflow vulnerabilities exist in the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways that could allow an unauthenticated remote attacker to execute arbitrary code. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system leading to complete system compromise.
    Assigner
    Impacted products
    Vendor Product Version
    Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways Affected: 9.7.0.0 , ≤ 9.7.0.0 (semver)
    Affected: 9.6.0.0 , ≤ 9.6.3.1 (semver)
    Affected: 9.5.0.0 , ≤ 9.5.8.1 (semver)
    Affected: 9.4.0.0 , ≤ 9.4.8.2 (semver)
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "cna": {
          "affected": [
            {
              "defaultStatus": "affected",
              "product": "EdgeConnect SD-WAN Gateways",
              "vendor": "Hewlett Packard Enterprise (HPE)",
              "versions": [
                {
                  "lessThanOrEqual": "9.7.0.0",
                  "status": "affected",
                  "version": "9.7.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "9.6.3.1",
                  "status": "affected",
                  "version": "9.6.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "9.5.8.1",
                  "status": "affected",
                  "version": "9.5.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "9.4.8.2",
                  "status": "affected",
                  "version": "9.4.0.0",
                  "versionType": "semver"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "reporter",
              "value": "Internal security research (HPE Networking)."
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "Buffer overflow vulnerabilities exist in the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways that could allow an unauthenticated remote attacker to execute arbitrary code. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system leading to complete system compromise."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 9.8,
                "baseSeverity": "CRITICAL",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-09-15T19:23:35.574Z",
            "orgId": "eb103674-0d28-4225-80f8-39fb86215de0",
            "shortName": "hpe"
          },
          "references": [
            {
              "url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05135en_us\u0026docLocale=en_US"
            }
          ],
          "source": {
            "advisory": "HPESBNW05135",
            "discovery": "INTERNAL"
          },
          "title": "Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in HPE Networking EdgeConnect SD-WAN Gateways",
          "x_generator": {
            "engine": "Vulnogram 0.2.0"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "eb103674-0d28-4225-80f8-39fb86215de0",
        "assignerShortName": "hpe",
        "cveId": "CVE-2026-76674",
        "datePublished": "2026-09-15T19:23:35.574Z",
        "dateReserved": "2026-08-19T16:11:04.542Z",
        "dateUpdated": "2026-09-15T19:23:35.574Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-76673 (GCVE-0-2026-76673)

    Vulnerability from cvelistv5 – Published: 2026-09-15 19:23 – Updated: 2026-09-15 19:23
    VLAI
    Title
    Authentication Bypass Vulnerabilities in API of EdgeConnect SD-WAN Orchestrator
    Summary
    Vulnerabilities have been identified in the API of EdgeConnect SD-WAN Orchestrator that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative privileges leading to complete compromise of the EdgeConnect SD-WAN Orchestrator host.
    Assigner
    Impacted products
    Vendor Product Version
    Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways Affected: 9.7.0 , ≤ 9.7.0 (semver)
    Affected: 9.6.0 , ≤ 9.6.3 (semver)
    Affected: 9.5.0 , ≤ 9.5.8 (semver)
    Affected: 9.4.0 , ≤ 9.4.10 (semver)
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "cna": {
          "affected": [
            {
              "defaultStatus": "affected",
              "product": "EdgeConnect SD-WAN Gateways",
              "vendor": "Hewlett Packard Enterprise (HPE)",
              "versions": [
                {
                  "lessThanOrEqual": "9.7.0",
                  "status": "affected",
                  "version": "9.7.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "9.6.3",
                  "status": "affected",
                  "version": "9.6.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "9.5.8",
                  "status": "affected",
                  "version": "9.5.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "9.4.10",
                  "status": "affected",
                  "version": "9.4.0",
                  "versionType": "semver"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "reporter",
              "value": "Internal security research (HPE Networking)."
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "Vulnerabilities have been identified in the API of EdgeConnect SD-WAN Orchestrator that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative privileges leading to complete compromise of the EdgeConnect SD-WAN Orchestrator host."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 9.8,
                "baseSeverity": "CRITICAL",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-09-15T19:23:34.718Z",
            "orgId": "eb103674-0d28-4225-80f8-39fb86215de0",
            "shortName": "hpe"
          },
          "references": [
            {
              "url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05135en_us\u0026docLocale=en_US"
            }
          ],
          "source": {
            "advisory": "HPESBNW05135",
            "discovery": "INTERNAL"
          },
          "title": "Authentication Bypass Vulnerabilities in API of EdgeConnect SD-WAN Orchestrator",
          "x_generator": {
            "engine": "Vulnogram 0.2.0"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "eb103674-0d28-4225-80f8-39fb86215de0",
        "assignerShortName": "hpe",
        "cveId": "CVE-2026-76673",
        "datePublished": "2026-09-15T19:23:34.718Z",
        "dateReserved": "2026-08-19T16:11:04.542Z",
        "dateUpdated": "2026-09-15T19:23:34.718Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-76672 (GCVE-0-2026-76672)

    Vulnerability from cvelistv5 – Published: 2026-09-15 19:23 – Updated: 2026-09-15 19:23
    VLAI
    Title
    Authenticated Sensitive Information Disclosure in HPE Networking EdgeConnect SD-WAN Orchestrator
    Summary
    A vulnerability exists in the SD-WAN Orchestrator that may lead to the exposure of sensitive configuration information. An authenticated remote attacker with read-only privileges could exploit this vulnerability by sending a specially crafted request to the cache synchronization endpoint. Successful exploitation could result in the disclosure of sensitive third-party API tokens and credentials, potentially enabling lateral movement to external security platforms.
    Assigner
    Impacted products
    Vendor Product Version
    Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways Affected: 9.7.0 , ≤ 9.7.0 (semver)
    Affected: 9.6.0 , ≤ 9.6.3 (semver)
    Affected: 9.5.0 , ≤ 9.5.8 (semver)
    Affected: 9.4.0 , ≤ 9.4.10 (semver)
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "cna": {
          "affected": [
            {
              "defaultStatus": "affected",
              "product": "EdgeConnect SD-WAN Gateways",
              "vendor": "Hewlett Packard Enterprise (HPE)",
              "versions": [
                {
                  "lessThanOrEqual": "9.7.0",
                  "status": "affected",
                  "version": "9.7.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "9.6.3",
                  "status": "affected",
                  "version": "9.6.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "9.5.8",
                  "status": "affected",
                  "version": "9.5.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "9.4.10",
                  "status": "affected",
                  "version": "9.4.0",
                  "versionType": "semver"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "reporter",
              "value": "Internal security research (HPE Networking)."
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "A vulnerability exists in the SD-WAN Orchestrator that may lead to the exposure of sensitive configuration information. An authenticated remote attacker with read-only privileges could exploit this vulnerability by sending a specially crafted request to the cache synchronization endpoint. Successful exploitation could result in the disclosure of sensitive third-party API tokens and credentials, potentially enabling lateral movement to external security platforms."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "LOW",
                "baseScore": 9.9,
                "baseSeverity": "CRITICAL",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "LOW",
                "scope": "CHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-09-15T19:23:33.951Z",
            "orgId": "eb103674-0d28-4225-80f8-39fb86215de0",
            "shortName": "hpe"
          },
          "references": [
            {
              "url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05135en_us\u0026docLocale=en_US"
            }
          ],
          "source": {
            "advisory": "HPESBNW05135",
            "discovery": "INTERNAL"
          },
          "title": "Authenticated Sensitive Information Disclosure in HPE Networking EdgeConnect SD-WAN Orchestrator",
          "x_generator": {
            "engine": "Vulnogram 0.2.0"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "eb103674-0d28-4225-80f8-39fb86215de0",
        "assignerShortName": "hpe",
        "cveId": "CVE-2026-76672",
        "datePublished": "2026-09-15T19:23:33.951Z",
        "dateReserved": "2026-08-19T16:11:04.542Z",
        "dateUpdated": "2026-09-15T19:23:33.951Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-76670 (GCVE-0-2026-76670)

    Vulnerability from cvelistv5 – Published: 2026-09-15 19:23 – Updated: 2026-09-15 19:23
    VLAI
    Title
    Authorization Bypass Leading to Privilege Escalation in EdgeConnect SD-WAN Orchestrator
    Summary
    Privilege escalation vulnerabilities exist in the API of HPE Networking EdgeConnect SD-WAN Orchestrator. Successful exploitation could allow a remote low-privileged authenticated user to escalate their privileges to those of an administrative user, leading to complete system compromise.
    Assigner
    Impacted products
    Vendor Product Version
    Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways Affected: 9.7.0 , ≤ 9.7.0 (semver)
    Affected: 9.6.0 , ≤ 9.6.3 (semver)
    Affected: 9.5.0 , ≤ 9.5.8 (semver)
    Affected: 9.4.0 , ≤ 9.4.10 (semver)
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "cna": {
          "affected": [
            {
              "defaultStatus": "affected",
              "product": "EdgeConnect SD-WAN Gateways",
              "vendor": "Hewlett Packard Enterprise (HPE)",
              "versions": [
                {
                  "lessThanOrEqual": "9.7.0",
                  "status": "affected",
                  "version": "9.7.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "9.6.3",
                  "status": "affected",
                  "version": "9.6.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "9.5.8",
                  "status": "affected",
                  "version": "9.5.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "9.4.10",
                  "status": "affected",
                  "version": "9.4.0",
                  "versionType": "semver"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "reporter",
              "value": "This vulnerability was reported by Christopher Alejandro (Moroco) to the HPE Networking Bug Bounty program."
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "Privilege escalation vulnerabilities exist in the API of HPE Networking EdgeConnect SD-WAN Orchestrator. Successful exploitation could allow a remote low-privileged authenticated user to escalate their privileges to those of an administrative user, leading to complete system compromise."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 9.9,
                "baseSeverity": "CRITICAL",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "LOW",
                "scope": "CHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-09-15T19:23:33.196Z",
            "orgId": "eb103674-0d28-4225-80f8-39fb86215de0",
            "shortName": "hpe"
          },
          "references": [
            {
              "url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05135en_us\u0026docLocale=en_US"
            }
          ],
          "source": {
            "advisory": "HPESBNW05135",
            "discovery": "INTERNAL"
          },
          "title": "Authorization Bypass Leading to Privilege Escalation in EdgeConnect SD-WAN Orchestrator",
          "x_generator": {
            "engine": "Vulnogram 0.2.0"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "eb103674-0d28-4225-80f8-39fb86215de0",
        "assignerShortName": "hpe",
        "cveId": "CVE-2026-76670",
        "datePublished": "2026-09-15T19:23:33.196Z",
        "dateReserved": "2026-08-19T16:11:04.542Z",
        "dateUpdated": "2026-09-15T19:23:33.196Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-76669 (GCVE-0-2026-76669)

    Vulnerability from cvelistv5 – Published: 2026-09-15 19:23 – Updated: 2026-09-15 19:25
    VLAI
    Title
    Authorization Bypass Leading to Privilege Escalation in EdgeConnect SD-WAN Orchestrator
    Summary
    Privilege escalation vulnerabilities exist in the API of HPE Networking EdgeConnect SD-WAN Orchestrator. Successful exploitation could allow a remote low-privileged authenticated user to escalate their privileges to those of an administrative user, leading to complete system compromise.
    Assigner
    Impacted products
    Vendor Product Version
    Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways Affected: 9.7.0 , ≤ 9.7.0 (semver)
    Affected: 9.6.0 , ≤ 9.6.3 (semver)
    Affected: 9.5.0 , ≤ 9.5.8 (semver)
    Affected: 9.4.0 , ≤ 9.4.10 (semver)
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "cna": {
          "affected": [
            {
              "defaultStatus": "affected",
              "product": "EdgeConnect SD-WAN Gateways",
              "vendor": "Hewlett Packard Enterprise (HPE)",
              "versions": [
                {
                  "lessThanOrEqual": "9.7.0",
                  "status": "affected",
                  "version": "9.7.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "9.6.3",
                  "status": "affected",
                  "version": "9.6.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "9.5.8",
                  "status": "affected",
                  "version": "9.5.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "9.4.10",
                  "status": "affected",
                  "version": "9.4.0",
                  "versionType": "semver"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "reporter",
              "value": "Internal security research (HPE Networking)."
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "Privilege escalation vulnerabilities exist in the API of HPE Networking EdgeConnect SD-WAN Orchestrator. Successful exploitation could allow a remote low-privileged authenticated user to escalate their privileges to those of an administrative user, leading to complete system compromise."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 9.9,
                "baseSeverity": "CRITICAL",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "LOW",
                "scope": "CHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-09-15T19:25:15.453Z",
            "orgId": "eb103674-0d28-4225-80f8-39fb86215de0",
            "shortName": "hpe"
          },
          "references": [
            {
              "url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05135en_us\u0026docLocale=en_US"
            }
          ],
          "source": {
            "advisory": "HPESBNW05135",
            "discovery": "INTERNAL"
          },
          "title": "Authorization Bypass Leading to Privilege Escalation in EdgeConnect SD-WAN Orchestrator",
          "x_generator": {
            "engine": "Vulnogram 0.2.0"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "eb103674-0d28-4225-80f8-39fb86215de0",
        "assignerShortName": "hpe",
        "cveId": "CVE-2026-76669",
        "datePublished": "2026-09-15T19:23:32.489Z",
        "dateReserved": "2026-08-19T16:11:04.542Z",
        "dateUpdated": "2026-09-15T19:25:15.453Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-73785 (GCVE-0-2026-73785)

    Vulnerability from cvelistv5 – Published: 2026-09-11 06:51 – Updated: 2026-09-11 15:52
    VLAI
    Title
    HPE IceWall Federation Agent and Proxy, Denial of Service vulnerability
    Summary
    A potential security vulnerability in HPE IceWall Federation Agent and Proxy could allow a remote unauthenticated attacker to cause a denial of service (DoS).
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-09-11 15:52 UTC
    CWE
    • CWE-241 - Improper handling of unexpected data type
    Assigner
    Impacted products
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-73785",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-09-11T15:52:14.533864Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-09-11T15:52:49.508Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "unaffected",
              "platforms": [
                "Windows",
                "Linux"
              ],
              "product": "HPE IceWall products",
              "vendor": "Hewlett Packard Enterprise",
              "versions": [
                {
                  "status": "affected",
                  "version": "4.0"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "\u003cdiv\u003e\u003cspan\u003eA potential security vulnerability in HPE IceWall Federation Agent and Proxy could allow a remote unauthenticated attacker to cause a denial of service (DoS).\u003c/span\u003e\u003c/div\u003e"
                }
              ],
              "value": "A potential security vulnerability in HPE IceWall Federation Agent and Proxy could allow a remote unauthenticated attacker to cause a denial of service (DoS)."
            }
          ],
          "impacts": [
            {
              "capecId": "CAPEC-469",
              "descriptions": [
                {
                  "lang": "en",
                  "value": "CAPEC-469 HTTP DoS"
                }
              ]
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 7.5,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "NONE",
                "integrityImpact": "NONE",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-241",
                  "description": "CWE-241 Improper handling of unexpected data type",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-09-11T06:51:35.239Z",
            "orgId": "eb103674-0d28-4225-80f8-39fb86215de0",
            "shortName": "hpe"
          },
          "references": [
            {
              "url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbmu05147en_us\u0026docLocale=en_US"
            }
          ],
          "source": {
            "discovery": "UNKNOWN"
          },
          "title": "HPE IceWall Federation Agent and Proxy, Denial of Service vulnerability",
          "x_generator": {
            "engine": "Vulnogram 1.0.5"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "eb103674-0d28-4225-80f8-39fb86215de0",
        "assignerShortName": "hpe",
        "cveId": "CVE-2026-73785",
        "datePublished": "2026-09-11T06:51:35.239Z",
        "dateReserved": "2026-08-13T16:39:33.898Z",
        "dateUpdated": "2026-09-11T15:52:49.508Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-73784 (GCVE-0-2026-73784)

    Vulnerability from cvelistv5 – Published: 2026-09-11 06:21 – Updated: 2026-09-11 13:46
    VLAI
    Title
    HPE IceWall products, Remote Bypass of Security Restrictions
    Summary
    A potential security vulnerability in HPE IceWall products could be exploited to tamper SAML response, allowing an attacker to impersonate another user.
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-09-11 12:51 UTC
    CWE
    • CWE-347 - Improper verification of cryptographic signature
    Assigner
    Impacted products
    Date Public
    2026-09-11 04:39
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-73784",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-09-11T12:51:51.413160Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-09-11T13:46:23.240Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "unaffected",
              "platforms": [
                "Windows",
                "Linux"
              ],
              "product": "HPE IceWall products",
              "vendor": "Hewlett Packard Enterprise",
              "versions": [
                {
                  "status": "affected",
                  "version": "4.0",
                  "versionType": "custom"
                }
              ]
            }
          ],
          "datePublic": "2026-09-11T04:39:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "\u003cdiv\u003e\u003cspan\u003eA potential security vulnerability in HPE IceWall products could be exploited to tamper SAML response, allowing an attacker to impersonate another user.\u003c/span\u003e\u003c/div\u003e"
                }
              ],
              "value": "A potential security vulnerability in HPE IceWall products could be exploited to tamper SAML response, allowing an attacker to impersonate another user."
            }
          ],
          "impacts": [
            {
              "capecId": "CAPEC-114",
              "descriptions": [
                {
                  "lang": "en",
                  "value": "CAPEC-114 Authentication Abuse"
                }
              ]
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 8.8,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-347",
                  "description": "CWE-347 Improper verification of cryptographic signature",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-09-11T06:21:56.788Z",
            "orgId": "eb103674-0d28-4225-80f8-39fb86215de0",
            "shortName": "hpe"
          },
          "references": [
            {
              "url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbmu05142en_us\u0026docLocale=en_US"
            }
          ],
          "source": {
            "discovery": "UNKNOWN"
          },
          "title": "HPE IceWall products, Remote Bypass of Security Restrictions",
          "x_generator": {
            "engine": "Vulnogram 1.0.5"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "eb103674-0d28-4225-80f8-39fb86215de0",
        "assignerShortName": "hpe",
        "cveId": "CVE-2026-73784",
        "datePublished": "2026-09-11T06:21:56.788Z",
        "dateReserved": "2026-08-13T16:39:33.898Z",
        "dateUpdated": "2026-09-11T13:46:23.240Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-73789 (GCVE-0-2026-73789)

    Vulnerability from cvelistv5 – Published: 2026-09-09 19:15 – Updated: 2026-09-10 14:01
    VLAI
    Title
    Unauthenticated Insecure Parameter Manipulation allows Data Tampering In CPPM Web Interface
    Summary
    A vulnerability in the web-based management interface of CPPM guest account management services could allow an unauthenticated remote attacker to manipulate account settings. Successful exploitation could allow an attacker to extend network access beyond policy limits, leading to unauthorized prolonged use of network resources.
    SSVC
    Exploitation: none Automatable: yes Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-09-10 13:53 UTC
    CWE
    • CWE-284 - Improper Access Control
    Assigner
    Impacted products
    Vendor Product Version
    Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM) Affected: 6.12.0 , ≤ 6.12.8 (semver)
    Affected: 6.11.0 , ≤ 6.11.14 (semver)
    Create a notification for this product.
    Credits
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-73789",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "yes"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-09-10T13:53:57.154473Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "problemTypes": [
              {
                "descriptions": [
                  {
                    "cweId": "CWE-284",
                    "description": "CWE-284 Improper Access Control",
                    "lang": "en",
                    "type": "CWE"
                  }
                ]
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-09-10T14:01:43.377Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "affected",
              "product": "ClearPass Policy Manager (CPPM)",
              "vendor": "Hewlett Packard Enterprise (HPE)",
              "versions": [
                {
                  "lessThanOrEqual": "6.12.8",
                  "status": "affected",
                  "version": "6.12.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "6.11.14",
                  "status": "affected",
                  "version": "6.11.0",
                  "versionType": "semver"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "reporter",
              "value": "0x50d"
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "\u003cp\u003eA vulnerability in the web-based management interface of CPPM guest account management services could allow an unauthenticated remote attacker to manipulate account settings. Successful exploitation could allow an attacker to extend network access beyond policy limits, leading to unauthorized prolonged use of network resources.\u003c/p\u003e"
                }
              ],
              "value": "A vulnerability in the web-based management interface of CPPM guest account management services could allow an unauthenticated remote attacker to manipulate account settings. Successful exploitation could allow an attacker to extend network access beyond policy limits, leading to unauthorized prolonged use of network resources."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "NONE",
                "baseScore": 5.3,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "NONE",
                "integrityImpact": "LOW",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-09-09T19:15:21.899Z",
            "orgId": "eb103674-0d28-4225-80f8-39fb86215de0",
            "shortName": "hpe"
          },
          "references": [
            {
              "url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05130en_us\u0026docLocale=en_US"
            }
          ],
          "source": {
            "advisory": "HPESBNW05130",
            "discovery": "INTERNAL"
          },
          "title": "Unauthenticated Insecure Parameter Manipulation allows Data Tampering In CPPM Web Interface",
          "x_generator": {
            "engine": "Vulnogram 0.2.0"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "eb103674-0d28-4225-80f8-39fb86215de0",
        "assignerShortName": "hpe",
        "cveId": "CVE-2026-73789",
        "datePublished": "2026-09-09T19:15:21.899Z",
        "dateReserved": "2026-08-13T16:39:33.899Z",
        "dateUpdated": "2026-09-10T14:01:43.377Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-73788 (GCVE-0-2026-73788)

    Vulnerability from cvelistv5 – Published: 2026-09-09 19:14 – Updated: 2026-09-10 14:02
    VLAI
    Title
    Privilege Escalation in ClearPass OnGuard Agent
    Summary
    A vulnerability in the ClearPass OnGuard agent could allow an authenticated remote attacker to elevate their own privileges on a vulnerable ClearPass OnGuard deployment. Successful exploitation could allow an attacker to obtain root privileges, leading to potentially unauthorized operation of the vulnerable system.
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-09-10 14:02 UTC
    CWE
    • CWE-269 - Improper Privilege Management
    Assigner
    Impacted products
    Vendor Product Version
    Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM) Affected: 6.12.0 , ≤ 6.12.8 (semver)
    Affected: 6.11.0 , ≤ 6.11.14 (semver)
    Create a notification for this product.
    Credits
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-73788",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-09-10T14:02:08.335418Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "problemTypes": [
              {
                "descriptions": [
                  {
                    "cweId": "CWE-269",
                    "description": "CWE-269 Improper Privilege Management",
                    "lang": "en",
                    "type": "CWE"
                  }
                ]
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-09-10T14:02:25.743Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "affected",
              "product": "ClearPass Policy Manager (CPPM)",
              "vendor": "Hewlett Packard Enterprise (HPE)",
              "versions": [
                {
                  "lessThanOrEqual": "6.12.8",
                  "status": "affected",
                  "version": "6.12.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "6.11.14",
                  "status": "affected",
                  "version": "6.11.0",
                  "versionType": "semver"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "reporter",
              "value": "n3k"
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "\u003cp\u003eA vulnerability in the ClearPass OnGuard agent could allow an authenticated remote attacker to elevate their own privileges on a vulnerable ClearPass OnGuard deployment. Successful exploitation could allow an attacker to obtain root privileges, leading to potentially unauthorized operation of the vulnerable system.\u003c/p\u003e"
                }
              ],
              "value": "A vulnerability in the ClearPass OnGuard agent could allow an authenticated remote attacker to elevate their own privileges on a vulnerable ClearPass OnGuard deployment. Successful exploitation could allow an attacker to obtain root privileges, leading to potentially unauthorized operation of the vulnerable system."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "NONE",
                "baseScore": 6.5,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "NONE",
                "integrityImpact": "HIGH",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-09-09T19:14:37.359Z",
            "orgId": "eb103674-0d28-4225-80f8-39fb86215de0",
            "shortName": "hpe"
          },
          "references": [
            {
              "url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05130en_us\u0026docLocale=en_US"
            }
          ],
          "source": {
            "advisory": "HPESBNW05130",
            "discovery": "INTERNAL"
          },
          "title": "Privilege Escalation in ClearPass OnGuard Agent",
          "x_generator": {
            "engine": "Vulnogram 0.2.0"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "eb103674-0d28-4225-80f8-39fb86215de0",
        "assignerShortName": "hpe",
        "cveId": "CVE-2026-73788",
        "datePublished": "2026-09-09T19:14:37.359Z",
        "dateReserved": "2026-08-13T16:39:33.899Z",
        "dateUpdated": "2026-09-10T14:02:25.743Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-73787 (GCVE-0-2026-73787)

    Vulnerability from cvelistv5 – Published: 2026-09-09 19:14 – Updated: 2026-09-11 03:56
    VLAI
    Title
    Authenticated Arbitrary File Write allows Remote Code Execution via CPPM Web Interface
    Summary
    A vulnerability in the CPPM web interface could allow an authenticated remote attacker to access directory information on a vulnerable system. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-09-10 00:00 UTC
    CWE
    • CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
    Assigner
    Impacted products
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-73787",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-09-10T00:00:00+00:00",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "problemTypes": [
              {
                "descriptions": [
                  {
                    "cweId": "CWE-78",
                    "description": "CWE-78 Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
                    "lang": "en",
                    "type": "CWE"
                  }
                ]
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-09-11T03:56:31.790Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "affected",
              "product": "ClearPass Policy Manager (CPPM)",
              "vendor": "Hewlett Packard Enterprise (HPE)",
              "versions": [
                {
                  "lessThanOrEqual": "6.11.14",
                  "status": "affected",
                  "version": "6.11.0",
                  "versionType": "semver"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "reporter",
              "value": "Luke Young (@bored_engineer)"
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "\u003cp\u003eA vulnerability in the CPPM web interface could allow an authenticated remote attacker to access directory information on a vulnerable system. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.\u003c/p\u003e"
                }
              ],
              "value": "A vulnerability in the CPPM web interface could allow an authenticated remote attacker to access directory information on a vulnerable system. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 7.2,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "HIGH",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-09-09T19:14:18.443Z",
            "orgId": "eb103674-0d28-4225-80f8-39fb86215de0",
            "shortName": "hpe"
          },
          "references": [
            {
              "url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05130en_us\u0026docLocale=en_US"
            }
          ],
          "source": {
            "advisory": "HPESBNW05130",
            "discovery": "INTERNAL"
          },
          "title": "Authenticated Arbitrary File Write allows Remote Code Execution via CPPM Web Interface",
          "x_generator": {
            "engine": "Vulnogram 0.2.0"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "eb103674-0d28-4225-80f8-39fb86215de0",
        "assignerShortName": "hpe",
        "cveId": "CVE-2026-73787",
        "datePublished": "2026-09-09T19:14:18.443Z",
        "dateReserved": "2026-08-13T16:39:33.899Z",
        "dateUpdated": "2026-09-11T03:56:31.790Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-73786 (GCVE-0-2026-73786)

    Vulnerability from cvelistv5 – Published: 2026-09-09 19:13 – Updated: 2026-09-10 14:52
    VLAI
    Title
    Unauthenticated Network-Based Denial of Service in CPPM systems
    Summary
    A vulnerability in the web-based management interface of CPPM could allow an unauthenticated remote attacker to conduct a Denial-of-Service (DoS) attack. Successful exploitation could allow an attacker to cause instability and degrade performance of the vulnerable CPPM server.
    SSVC
    Exploitation: none Automatable: yes Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-09-10 14:52 UTC
    CWE
    • CWE-400 - Uncontrolled Resource Consumption
    Assigner
    Impacted products
    Credits
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-73786",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "yes"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-09-10T14:52:15.979249Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "problemTypes": [
              {
                "descriptions": [
                  {
                    "cweId": "CWE-400",
                    "description": "CWE-400 Uncontrolled Resource Consumption",
                    "lang": "en",
                    "type": "CWE"
                  }
                ]
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-09-10T14:52:31.040Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "affected",
              "product": "ClearPass Policy Manager (CPPM)",
              "vendor": "Hewlett Packard Enterprise (HPE)",
              "versions": [
                {
                  "lessThanOrEqual": "6.11.14",
                  "status": "affected",
                  "version": "6.11.0",
                  "versionType": "semver"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "reporter",
              "value": "promasu"
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "\u003cp\u003eA vulnerability in the web-based management interface of CPPM could allow an unauthenticated remote attacker to conduct a Denial-of-Service (DoS) attack. Successful exploitation could allow an attacker to cause instability and degrade performance of the vulnerable CPPM server.\u003c/p\u003e"
                }
              ],
              "value": "A vulnerability in the web-based management interface of CPPM could allow an unauthenticated remote attacker to conduct a Denial-of-Service (DoS) attack. Successful exploitation could allow an attacker to cause instability and degrade performance of the vulnerable CPPM server."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 7.5,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "NONE",
                "integrityImpact": "NONE",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-09-09T19:13:31.042Z",
            "orgId": "eb103674-0d28-4225-80f8-39fb86215de0",
            "shortName": "hpe"
          },
          "references": [
            {
              "url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05130en_us\u0026docLocale=en_US"
            }
          ],
          "source": {
            "advisory": "HPESBNW05130",
            "discovery": "INTERNAL"
          },
          "title": "Unauthenticated Network-Based Denial of Service in CPPM systems",
          "x_generator": {
            "engine": "Vulnogram 0.2.0"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "eb103674-0d28-4225-80f8-39fb86215de0",
        "assignerShortName": "hpe",
        "cveId": "CVE-2026-73786",
        "datePublished": "2026-09-09T19:13:31.042Z",
        "dateReserved": "2026-08-13T16:39:33.898Z",
        "dateUpdated": "2026-09-10T14:52:31.040Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-73769 (GCVE-0-2026-73769)

    Vulnerability from cvelistv5 – Published: 2026-09-09 19:13 – Updated: 2026-09-11 03:56
    VLAI
    Title
    Authenticated Remote Code Execution in CPPM Web Interface
    Summary
    A vulnerability in the web-based management interface of vulnerable CPPM systems could allow an authenticated remote attacker to achieve remote code execution. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-09-10 00:00 UTC
    CWE
    • CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
    Assigner
    Impacted products
    Vendor Product Version
    Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM) Affected: 6.12.0 , ≤ 6.12.8 (semver)
    Affected: 6.11.0 , ≤ 6.11.14 (semver)
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-73769",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-09-10T00:00:00+00:00",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "problemTypes": [
              {
                "descriptions": [
                  {
                    "cweId": "CWE-78",
                    "description": "CWE-78 Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
                    "lang": "en",
                    "type": "CWE"
                  }
                ]
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-09-11T03:56:32.855Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "affected",
              "product": "ClearPass Policy Manager (CPPM)",
              "vendor": "Hewlett Packard Enterprise (HPE)",
              "versions": [
                {
                  "lessThanOrEqual": "6.12.8",
                  "status": "affected",
                  "version": "6.12.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "6.11.14",
                  "status": "affected",
                  "version": "6.11.0",
                  "versionType": "semver"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "reporter",
              "value": "Daniel Jensen (@dozernz)"
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "\u003cp\u003eA vulnerability in the web-based management interface of vulnerable CPPM systems could allow an authenticated remote attacker to achieve remote code execution. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.\u003c/p\u003e"
                }
              ],
              "value": "A vulnerability in the web-based management interface of vulnerable CPPM systems could allow an authenticated remote attacker to achieve remote code execution. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 7.2,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "HIGH",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-09-09T19:13:20.453Z",
            "orgId": "eb103674-0d28-4225-80f8-39fb86215de0",
            "shortName": "hpe"
          },
          "references": [
            {
              "url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05130en_us\u0026docLocale=en_US"
            }
          ],
          "source": {
            "advisory": "HPESBNW05130",
            "discovery": "INTERNAL"
          },
          "title": "Authenticated Remote Code Execution in CPPM Web Interface",
          "x_generator": {
            "engine": "Vulnogram 0.2.0"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "eb103674-0d28-4225-80f8-39fb86215de0",
        "assignerShortName": "hpe",
        "cveId": "CVE-2026-73769",
        "datePublished": "2026-09-09T19:13:20.453Z",
        "dateReserved": "2026-08-13T16:38:49.645Z",
        "dateUpdated": "2026-09-11T03:56:32.855Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-73783 (GCVE-0-2026-73783)

    Vulnerability from cvelistv5 – Published: 2026-09-01 20:29 – Updated: 2026-09-02 12:32
    VLAI
    Title
    Authenticated Stack Overflow Vulnerabilities lead to Denial-of-Service in AOS-CX
    Summary
    Stack overflow vulnerabilities exist in an API endpoint of AOS-CX. Successful exploitation could allow an authenticated malicious actor to cause a denial-of-service condition on the affected system.
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-09-02 12:32 UTC
    CWE
    • CWE-121 - Stack-based Buffer Overflow
    Assigner
    Impacted products
    Vendor Product Version
    Hewlett Packard Enterprise (HPE) AOS-CX Affected: 10.18.0000 , ≤ 10.18.0001 (semver)
    Affected: 10.17.0000 , ≤ 10.17.1021 (semver)
    Affected: 10.16.0000 , ≤ 10.16.1051 (semver)
    Affected: 10.13.0000 , ≤ 10.13.1180 (semver)
    Affected: 10.10.0000 , ≤ 10.10.1180 (semver)
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-73783",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-09-02T12:32:14.290757Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "problemTypes": [
              {
                "descriptions": [
                  {
                    "cweId": "CWE-121",
                    "description": "CWE-121 Stack-based Buffer Overflow",
                    "lang": "en",
                    "type": "CWE"
                  }
                ]
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-09-02T12:32:26.868Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "affected",
              "product": "AOS-CX",
              "vendor": "Hewlett Packard Enterprise (HPE)",
              "versions": [
                {
                  "lessThanOrEqual": "10.18.0001",
                  "status": "affected",
                  "version": "10.18.0000",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.17.1021",
                  "status": "affected",
                  "version": "10.17.0000",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.16.1051",
                  "status": "affected",
                  "version": "10.16.0000",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.13.1180",
                  "status": "affected",
                  "version": "10.13.0000",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.10.1180",
                  "status": "affected",
                  "version": "10.10.0000",
                  "versionType": "semver"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "reporter",
              "value": "This vulnerability was discovered by internal security research at HPE Networking."
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "Stack overflow vulnerabilities exist in an API endpoint of AOS-CX. Successful exploitation could allow an authenticated malicious actor to cause a denial-of-service condition on the affected system."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 4.9,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "NONE",
                "integrityImpact": "NONE",
                "privilegesRequired": "HIGH",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-09-01T20:29:01.155Z",
            "orgId": "eb103674-0d28-4225-80f8-39fb86215de0",
            "shortName": "hpe"
          },
          "references": [
            {
              "url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05134en_us\u0026docLocale=en_US"
            }
          ],
          "source": {
            "advisory": "HPESBNW05134",
            "discovery": "INTERNAL"
          },
          "title": "Authenticated Stack Overflow Vulnerabilities lead to Denial-of-Service in AOS-CX",
          "x_generator": {
            "engine": "Vulnogram 0.2.0"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "eb103674-0d28-4225-80f8-39fb86215de0",
        "assignerShortName": "hpe",
        "cveId": "CVE-2026-73783",
        "datePublished": "2026-09-01T20:29:01.155Z",
        "dateReserved": "2026-08-13T16:39:33.898Z",
        "dateUpdated": "2026-09-02T12:32:26.868Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-73782 (GCVE-0-2026-73782)

    Vulnerability from cvelistv5 – Published: 2026-09-01 20:28 – Updated: 2026-09-03 03:55
    VLAI
    Title
    Unauthenticated Format String Vulnerability leads to Remote Code Execution in AOS-CX
    Summary
    A format string vulnerability exists in the command line interface of AOS-CX that could lead to unauthenticated remote code execution. Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system.
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-09-02 00:00 UTC
    CWE
    • CWE-134 - Use of Externally-Controlled Format String
    Assigner
    Impacted products
    Vendor Product Version
    Hewlett Packard Enterprise (HPE) AOS-CX Affected: 10.18.0000 , ≤ 10.18.0001 (semver)
    Affected: 10.17.0000 , ≤ 10.17.1021 (semver)
    Affected: 10.16.0000 , ≤ 10.16.1051 (semver)
    Affected: 10.13.0000 , ≤ 10.13.1180 (semver)
    Affected: 10.10.0000 , ≤ 10.10.1180 (semver)
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-73782",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-09-02T00:00:00+00:00",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "problemTypes": [
              {
                "descriptions": [
                  {
                    "cweId": "CWE-134",
                    "description": "CWE-134 Use of Externally-Controlled Format String",
                    "lang": "en",
                    "type": "CWE"
                  }
                ]
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-09-03T03:55:50.337Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "affected",
              "product": "AOS-CX",
              "vendor": "Hewlett Packard Enterprise (HPE)",
              "versions": [
                {
                  "lessThanOrEqual": "10.18.0001",
                  "status": "affected",
                  "version": "10.18.0000",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.17.1021",
                  "status": "affected",
                  "version": "10.17.0000",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.16.1051",
                  "status": "affected",
                  "version": "10.16.0000",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.13.1180",
                  "status": "affected",
                  "version": "10.13.0000",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.10.1180",
                  "status": "affected",
                  "version": "10.10.0000",
                  "versionType": "semver"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "reporter",
              "value": "This vulnerability was discovered by internal security research at HPE Networking."
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "A format string vulnerability exists in the command line interface of AOS-CX that could lead to unauthenticated remote code execution. Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "ADJACENT_NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 8.8,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-09-01T20:28:59.646Z",
            "orgId": "eb103674-0d28-4225-80f8-39fb86215de0",
            "shortName": "hpe"
          },
          "references": [
            {
              "url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05134en_us\u0026docLocale=en_US"
            }
          ],
          "source": {
            "advisory": "HPESBNW05134",
            "discovery": "INTERNAL"
          },
          "title": "Unauthenticated Format String Vulnerability leads to Remote Code Execution in AOS-CX",
          "x_generator": {
            "engine": "Vulnogram 0.2.0"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "eb103674-0d28-4225-80f8-39fb86215de0",
        "assignerShortName": "hpe",
        "cveId": "CVE-2026-73782",
        "datePublished": "2026-09-01T20:28:59.646Z",
        "dateReserved": "2026-08-13T16:39:33.898Z",
        "dateUpdated": "2026-09-03T03:55:50.337Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-73781 (GCVE-0-2026-73781)

    Vulnerability from cvelistv5 – Published: 2026-09-01 20:28 – Updated: 2026-09-03 03:55
    VLAI
    Title
    Authenticated Stored Cross-Site Scripting Vulnerability (XSS) in AOS-CX Web-Based Management Interface
    Summary
    A vulnerability in the web-based management interface of AOS-CX could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against an administrative user of the interface. A successful exploit allows an attacker to execute arbitrary script code in a victim's browser in the context of the affected interface.
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-09-02 00:00 UTC
    CWE
    • CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
    Assigner
    Impacted products
    Vendor Product Version
    Hewlett Packard Enterprise (HPE) AOS-CX Affected: 10.18.0000 , ≤ 10.18.0001 (semver)
    Affected: 10.17.0000 , ≤ 10.17.1021 (semver)
    Affected: 10.16.0000 , ≤ 10.16.1051 (semver)
    Affected: 10.13.0000 , ≤ 10.13.1180 (semver)
    Affected: 10.10.0000 , ≤ 10.10.1180 (semver)
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-73781",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-09-02T00:00:00+00:00",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "problemTypes": [
              {
                "descriptions": [
                  {
                    "cweId": "CWE-79",
                    "description": "CWE-79 Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
                    "lang": "en",
                    "type": "CWE"
                  }
                ]
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-09-03T03:55:51.736Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "affected",
              "product": "AOS-CX",
              "vendor": "Hewlett Packard Enterprise (HPE)",
              "versions": [
                {
                  "lessThanOrEqual": "10.18.0001",
                  "status": "affected",
                  "version": "10.18.0000",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.17.1021",
                  "status": "affected",
                  "version": "10.17.0000",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.16.1051",
                  "status": "affected",
                  "version": "10.16.0000",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.13.1180",
                  "status": "affected",
                  "version": "10.13.0000",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.10.1180",
                  "status": "affected",
                  "version": "10.10.0000",
                  "versionType": "semver"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "reporter",
              "value": "This vulnerability was discovered by internal security research at HPE Networking."
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "A vulnerability in the web-based management interface of AOS-CX could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against an administrative user of the interface. A successful exploit allows an attacker to execute arbitrary script code in a victim\u0027s browser in the context of the affected interface."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 8.4,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "HIGH",
                "scope": "CHANGED",
                "userInteraction": "REQUIRED",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-09-01T20:28:58.139Z",
            "orgId": "eb103674-0d28-4225-80f8-39fb86215de0",
            "shortName": "hpe"
          },
          "references": [
            {
              "url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05134en_us\u0026docLocale=en_US"
            }
          ],
          "source": {
            "advisory": "HPESBNW05134",
            "discovery": "INTERNAL"
          },
          "title": "Authenticated Stored Cross-Site Scripting Vulnerability (XSS) in AOS-CX Web-Based Management Interface",
          "x_generator": {
            "engine": "Vulnogram 0.2.0"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "eb103674-0d28-4225-80f8-39fb86215de0",
        "assignerShortName": "hpe",
        "cveId": "CVE-2026-73781",
        "datePublished": "2026-09-01T20:28:58.139Z",
        "dateReserved": "2026-08-13T16:39:33.898Z",
        "dateUpdated": "2026-09-03T03:55:51.736Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-73780 (GCVE-0-2026-73780)

    Vulnerability from cvelistv5 – Published: 2026-09-01 20:28 – Updated: 2026-09-03 03:55
    VLAI
    Title
    Lack of Cross-Site Request Forgery (CSRF) Protections for Certificate-Authenticated Sessions in AOS-CX
    Summary
    A vulnerability in the web-based management interface of AOS-CX switches exposes some sessions to a lack of Cross-Site Request Forgery (CSRF) protection. This could allow a remote unauthenticated attacker to execute arbitrary input against the affected interface if the attacker can convince an authenticated user of the interface to interact with a specially crafted URL.
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-09-02 00:00 UTC
    CWE
    • CWE-352 - Cross-Site Request Forgery (CSRF)
    Assigner
    Impacted products
    Vendor Product Version
    Hewlett Packard Enterprise (HPE) AOS-CX Affected: 10.18.0000 , ≤ 10.18.0001 (semver)
    Affected: 10.17.0000 , ≤ 10.17.1021 (semver)
    Affected: 10.16.0000 , ≤ 10.16.1051 (semver)
    Affected: 10.13.0000 , ≤ 10.13.1180 (semver)
    Affected: 10.10.0000 , ≤ 10.10.1180 (semver)
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-73780",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-09-02T00:00:00+00:00",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "problemTypes": [
              {
                "descriptions": [
                  {
                    "cweId": "CWE-352",
                    "description": "CWE-352 Cross-Site Request Forgery (CSRF)",
                    "lang": "en",
                    "type": "CWE"
                  }
                ]
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-09-03T03:55:48.936Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "affected",
              "product": "AOS-CX",
              "vendor": "Hewlett Packard Enterprise (HPE)",
              "versions": [
                {
                  "lessThanOrEqual": "10.18.0001",
                  "status": "affected",
                  "version": "10.18.0000",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.17.1021",
                  "status": "affected",
                  "version": "10.17.0000",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.16.1051",
                  "status": "affected",
                  "version": "10.16.0000",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.13.1180",
                  "status": "affected",
                  "version": "10.13.0000",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.10.1180",
                  "status": "affected",
                  "version": "10.10.0000",
                  "versionType": "semver"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "reporter",
              "value": "This vulnerability was discovered by internal security research at HPE Networking."
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "A vulnerability in the web-based management interface of AOS-CX switches exposes some sessions to a lack of Cross-Site Request Forgery (CSRF) protection. This could allow a remote unauthenticated attacker to execute arbitrary input against the affected interface if the attacker can convince an authenticated user of the interface to interact with a specially crafted URL."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "HIGH",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 8.3,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "NONE",
                "scope": "CHANGED",
                "userInteraction": "REQUIRED",
                "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-09-01T20:28:56.542Z",
            "orgId": "eb103674-0d28-4225-80f8-39fb86215de0",
            "shortName": "hpe"
          },
          "references": [
            {
              "url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05134en_us\u0026docLocale=en_US"
            }
          ],
          "source": {
            "advisory": "HPESBNW05134",
            "discovery": "INTERNAL"
          },
          "title": "Lack of Cross-Site Request Forgery (CSRF) Protections for Certificate-Authenticated Sessions in AOS-CX",
          "x_generator": {
            "engine": "Vulnogram 0.2.0"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "eb103674-0d28-4225-80f8-39fb86215de0",
        "assignerShortName": "hpe",
        "cveId": "CVE-2026-73780",
        "datePublished": "2026-09-01T20:28:56.542Z",
        "dateReserved": "2026-08-13T16:39:33.898Z",
        "dateUpdated": "2026-09-03T03:55:48.936Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-73779 (GCVE-0-2026-73779)

    Vulnerability from cvelistv5 – Published: 2026-09-01 20:28 – Updated: 2026-09-03 03:55
    VLAI
    Title
    Authentication Bypass Vulnerabilities Leading to Information Disclosure, Unauthorized Modification, and Service Disruption in AOS-CX
    Summary
    Vulnerabilities have been identified in the operating system of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. Successful exploitation could compromise system integrity and further expose sensitive information.
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-09-02 00:00 UTC
    CWE
    • CWE-269 - Improper Privilege Management
    Assigner
    Impacted products
    Vendor Product Version
    Hewlett Packard Enterprise (HPE) AOS-CX Affected: 10.18.0000 , ≤ 10.18.0001 (semver)
    Affected: 10.17.0000 , ≤ 10.17.1021 (semver)
    Affected: 10.16.0000 , ≤ 10.16.1051 (semver)
    Affected: 10.13.0000 , ≤ 10.13.1180 (semver)
    Affected: 10.10.0000 , ≤ 10.10.1180 (semver)
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-73779",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-09-02T00:00:00+00:00",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "problemTypes": [
              {
                "descriptions": [
                  {
                    "cweId": "CWE-269",
                    "description": "CWE-269 Improper Privilege Management",
                    "lang": "en",
                    "type": "CWE"
                  }
                ]
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-09-03T03:55:53.178Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "affected",
              "product": "AOS-CX",
              "vendor": "Hewlett Packard Enterprise (HPE)",
              "versions": [
                {
                  "lessThanOrEqual": "10.18.0001",
                  "status": "affected",
                  "version": "10.18.0000",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.17.1021",
                  "status": "affected",
                  "version": "10.17.0000",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.16.1051",
                  "status": "affected",
                  "version": "10.16.0000",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.13.1180",
                  "status": "affected",
                  "version": "10.13.0000",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.10.1180",
                  "status": "affected",
                  "version": "10.10.0000",
                  "versionType": "semver"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "reporter",
              "value": "This vulnerability was discovered by internal security research at HPE Networking."
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "Vulnerabilities have been identified in the operating system of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. Successful exploitation could compromise system integrity and further expose sensitive information."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "HIGH",
                "attackVector": "ADJACENT_NETWORK",
                "availabilityImpact": "LOW",
                "baseScore": 8.2,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "NONE",
                "scope": "CHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-09-01T20:28:55.164Z",
            "orgId": "eb103674-0d28-4225-80f8-39fb86215de0",
            "shortName": "hpe"
          },
          "references": [
            {
              "url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05134en_us\u0026docLocale=en_US"
            }
          ],
          "source": {
            "advisory": "HPESBNW05134",
            "discovery": "INTERNAL"
          },
          "title": "Authentication Bypass Vulnerabilities Leading to Information Disclosure, Unauthorized Modification, and Service Disruption in AOS-CX",
          "x_generator": {
            "engine": "Vulnogram 0.2.0"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "eb103674-0d28-4225-80f8-39fb86215de0",
        "assignerShortName": "hpe",
        "cveId": "CVE-2026-73779",
        "datePublished": "2026-09-01T20:28:55.164Z",
        "dateReserved": "2026-08-13T16:39:09.491Z",
        "dateUpdated": "2026-09-03T03:55:53.178Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-73778 (GCVE-0-2026-73778)

    Vulnerability from cvelistv5 – Published: 2026-09-01 20:28 – Updated: 2026-09-03 03:56
    VLAI
    Title
    Credential Manager Vulnerability Allows Unauthorized Administrative Access
    Summary
    A vulnerability exists in the Credential Manager component that may allow for unauthorized administrative access. An unauthenticated remote attacker could exploit this vulnerability on a device in its factory-default or post-ZTP state before any administrator has configured credentials by providing a predictable factory-default password. Successful exploitation could result in full administrative control of the affected device during the initial setup process.
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-09-02 00:00 UTC
    CWE
    • CWE-521 - Weak Password Requirements
    Assigner
    Impacted products
    Vendor Product Version
    Hewlett Packard Enterprise (HPE) AOS-CX Affected: 10.18.0000 , ≤ 10.18.0001 (semver)
    Affected: 10.17.0000 , ≤ 10.17.1021 (semver)
    Affected: 10.16.0000 , ≤ 10.16.1051 (semver)
    Affected: 10.13.0000 , ≤ 10.13.1180 (semver)
    Affected: 10.10.0000 , ≤ 10.10.1180 (semver)
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-73778",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-09-02T00:00:00+00:00",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "problemTypes": [
              {
                "descriptions": [
                  {
                    "cweId": "CWE-521",
                    "description": "CWE-521 Weak Password Requirements",
                    "lang": "en",
                    "type": "CWE"
                  }
                ]
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-09-03T03:56:22.179Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "affected",
              "product": "AOS-CX",
              "vendor": "Hewlett Packard Enterprise (HPE)",
              "versions": [
                {
                  "lessThanOrEqual": "10.18.0001",
                  "status": "affected",
                  "version": "10.18.0000",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.17.1021",
                  "status": "affected",
                  "version": "10.17.0000",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.16.1051",
                  "status": "affected",
                  "version": "10.16.0000",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.13.1180",
                  "status": "affected",
                  "version": "10.13.0000",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.10.1180",
                  "status": "affected",
                  "version": "10.10.0000",
                  "versionType": "semver"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "reporter",
              "value": "This vulnerability was discovered by internal security research at HPE Networking."
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "A vulnerability exists in the Credential Manager component that may allow for unauthorized administrative access. An unauthenticated remote attacker could exploit this vulnerability on a device in its factory-default or post-ZTP state before any administrator has configured credentials by providing a predictable factory-default password. Successful exploitation could result in full administrative control of the affected device during the initial setup process."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "HIGH",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 8.1,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-09-01T20:28:53.496Z",
            "orgId": "eb103674-0d28-4225-80f8-39fb86215de0",
            "shortName": "hpe"
          },
          "references": [
            {
              "url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05134en_us\u0026docLocale=en_US"
            }
          ],
          "source": {
            "advisory": "HPESBNW05134",
            "discovery": "INTERNAL"
          },
          "title": "Credential Manager Vulnerability Allows Unauthorized Administrative Access",
          "x_generator": {
            "engine": "Vulnogram 0.2.0"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "eb103674-0d28-4225-80f8-39fb86215de0",
        "assignerShortName": "hpe",
        "cveId": "CVE-2026-73778",
        "datePublished": "2026-09-01T20:28:53.496Z",
        "dateReserved": "2026-08-13T16:39:09.491Z",
        "dateUpdated": "2026-09-03T03:56:22.179Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-73777 (GCVE-0-2026-73777)

    Vulnerability from cvelistv5 – Published: 2026-09-01 20:28 – Updated: 2026-09-03 03:55
    VLAI
    Title
    Authorization Bypass Vulnerabilities Leading to Privilege Escalation in AOS-CX API Endpoint
    Summary
    Vulnerabilities have been identified in the API endpoint of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls.
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-09-02 00:00 UTC
    CWE
    • CWE-287 - Improper Authentication
    Assigner
    Impacted products
    Vendor Product Version
    Hewlett Packard Enterprise (HPE) AOS-CX Affected: 10.18.0000 , ≤ 10.18.0001 (semver)
    Affected: 10.17.0000 , ≤ 10.17.1021 (semver)
    Affected: 10.16.0000 , ≤ 10.16.1051 (semver)
    Affected: 10.13.0000 , ≤ 10.13.1180 (semver)
    Affected: 10.10.0000 , ≤ 10.10.1180 (semver)
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-73777",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-09-02T00:00:00+00:00",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "problemTypes": [
              {
                "descriptions": [
                  {
                    "cweId": "CWE-287",
                    "description": "CWE-287 Improper Authentication",
                    "lang": "en",
                    "type": "CWE"
                  }
                ]
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-09-03T03:55:54.637Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "affected",
              "product": "AOS-CX",
              "vendor": "Hewlett Packard Enterprise (HPE)",
              "versions": [
                {
                  "lessThanOrEqual": "10.18.0001",
                  "status": "affected",
                  "version": "10.18.0000",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.17.1021",
                  "status": "affected",
                  "version": "10.17.0000",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.16.1051",
                  "status": "affected",
                  "version": "10.16.0000",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.13.1180",
                  "status": "affected",
                  "version": "10.13.0000",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.10.1180",
                  "status": "affected",
                  "version": "10.10.0000",
                  "versionType": "semver"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "reporter",
              "value": "This vulnerability was discovered by internal security research at HPE Networking."
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "Vulnerabilities have been identified in the API endpoint of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "HIGH",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 8.1,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-09-01T20:28:51.978Z",
            "orgId": "eb103674-0d28-4225-80f8-39fb86215de0",
            "shortName": "hpe"
          },
          "references": [
            {
              "url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05134en_us\u0026docLocale=en_US"
            }
          ],
          "source": {
            "advisory": "HPESBNW05134",
            "discovery": "INTERNAL"
          },
          "title": "Authorization Bypass Vulnerabilities Leading to Privilege Escalation in AOS-CX API Endpoint",
          "x_generator": {
            "engine": "Vulnogram 0.2.0"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "eb103674-0d28-4225-80f8-39fb86215de0",
        "assignerShortName": "hpe",
        "cveId": "CVE-2026-73777",
        "datePublished": "2026-09-01T20:28:51.978Z",
        "dateReserved": "2026-08-13T16:39:09.490Z",
        "dateUpdated": "2026-09-03T03:55:54.637Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-73776 (GCVE-0-2026-73776)

    Vulnerability from cvelistv5 – Published: 2026-09-01 20:28 – Updated: 2026-09-03 16:32
    VLAI
    Title
    Authenticated Signature Verification Bypass Leading to Arbitrary Code Execution in AOS-CX
    Summary
    A signature verification bypass vulnerability exists in the command line interface of AOS-CX. Successful exploitation could allow an authenticated malicious actor with administrative privileges to execute arbitrary code on the underlying operating system, when certain pre-conditions outside of the attacker’s control are met.
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-09-03 03:55 UTC
    CWE
    • CWE-347 - Improper Verification of Cryptographic Signature
    Assigner
    Impacted products
    Vendor Product Version
    Hewlett Packard Enterprise (HPE) AOS-CX Affected: 10.18.0000 , ≤ 10.18.0001 (semver)
    Affected: 10.17.0000 , ≤ 10.17.1021 (semver)
    Affected: 10.16.0000 , ≤ 10.16.1051 (semver)
    Affected: 10.13.0000 , ≤ 10.13.1180 (semver)
    Affected: 10.10.0000 , ≤ 10.10.1180 (semver)
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-73776",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-09-03T03:55:57.258388Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "problemTypes": [
              {
                "descriptions": [
                  {
                    "cweId": "CWE-347",
                    "description": "CWE-347 Improper Verification of Cryptographic Signature",
                    "lang": "en",
                    "type": "CWE"
                  }
                ]
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-09-03T16:32:15.185Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "affected",
              "product": "AOS-CX",
              "vendor": "Hewlett Packard Enterprise (HPE)",
              "versions": [
                {
                  "lessThanOrEqual": "10.18.0001",
                  "status": "affected",
                  "version": "10.18.0000",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.17.1021",
                  "status": "affected",
                  "version": "10.17.0000",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.16.1051",
                  "status": "affected",
                  "version": "10.16.0000",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.13.1180",
                  "status": "affected",
                  "version": "10.13.0000",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.10.1180",
                  "status": "affected",
                  "version": "10.10.0000",
                  "versionType": "semver"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "reporter",
              "value": "This vulnerability was discovered by internal security research at HPE Networking."
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "A signature verification bypass vulnerability exists in the command line interface of AOS-CX. Successful exploitation could allow an authenticated malicious actor with administrative privileges to execute arbitrary code on the underlying operating system, when certain pre-conditions outside of the attacker\u00e2\u20ac\u2122s control are met."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "NONE",
                "baseScore": 7.9,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "HIGH",
                "scope": "CHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-09-01T20:28:50.551Z",
            "orgId": "eb103674-0d28-4225-80f8-39fb86215de0",
            "shortName": "hpe"
          },
          "references": [
            {
              "url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05134en_us\u0026docLocale=en_US"
            }
          ],
          "source": {
            "advisory": "HPESBNW05134",
            "discovery": "INTERNAL"
          },
          "title": "Authenticated Signature Verification Bypass Leading to Arbitrary Code Execution in AOS-CX",
          "x_generator": {
            "engine": "Vulnogram 0.2.0"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "eb103674-0d28-4225-80f8-39fb86215de0",
        "assignerShortName": "hpe",
        "cveId": "CVE-2026-73776",
        "datePublished": "2026-09-01T20:28:50.551Z",
        "dateReserved": "2026-08-13T16:39:09.490Z",
        "dateUpdated": "2026-09-03T16:32:15.185Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-73775 (GCVE-0-2026-73775)

    Vulnerability from cvelistv5 – Published: 2026-09-01 20:28 – Updated: 2026-09-03 14:11
    VLAI
    Title
    Authenticated Sensitive Information Disclosure Vulnerabilities in AOS-CX
    Summary
    Vulnerabilities in the API endpoint of AOS-CX could allow a remote attacker authenticated with low privileges to access sensitive information. A successful exploit allows an attacker to retrieve information which could be used to potentially gain further access to network services supported by AOS-CX.
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-09-02 13:21 UTC
    CWE
    • CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor
    Assigner
    Impacted products
    Vendor Product Version
    Hewlett Packard Enterprise (HPE) AOS-CX Affected: 10.18.0000 , ≤ 10.18.0001 (semver)
    Affected: 10.17.0000 , ≤ 10.17.1021 (semver)
    Affected: 10.16.0000 , ≤ 10.16.1051 (semver)
    Affected: 10.13.0000 , ≤ 10.13.1180 (semver)
    Affected: 10.10.0000 , ≤ 10.10.1180 (semver)
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-73775",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-09-02T13:21:27.758276Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "problemTypes": [
              {
                "descriptions": [
                  {
                    "cweId": "CWE-200",
                    "description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor",
                    "lang": "en",
                    "type": "CWE"
                  }
                ]
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-09-03T14:11:33.533Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "affected",
              "product": "AOS-CX",
              "vendor": "Hewlett Packard Enterprise (HPE)",
              "versions": [
                {
                  "lessThanOrEqual": "10.18.0001",
                  "status": "affected",
                  "version": "10.18.0000",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.17.1021",
                  "status": "affected",
                  "version": "10.17.0000",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.16.1051",
                  "status": "affected",
                  "version": "10.16.0000",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.13.1180",
                  "status": "affected",
                  "version": "10.13.0000",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.10.1180",
                  "status": "affected",
                  "version": "10.10.0000",
                  "versionType": "semver"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "reporter",
              "value": "This vulnerability was discovered by internal security research at HPE Networking."
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "Vulnerabilities in the API endpoint of AOS-CX could allow a remote attacker authenticated with low privileges to access sensitive information. A successful exploit allows an attacker to retrieve information which could be used to potentially gain further access to network services supported by AOS-CX."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "NONE",
                "baseScore": 7.7,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "NONE",
                "privilegesRequired": "LOW",
                "scope": "CHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-09-01T20:28:44.155Z",
            "orgId": "eb103674-0d28-4225-80f8-39fb86215de0",
            "shortName": "hpe"
          },
          "references": [
            {
              "url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05134en_us\u0026docLocale=en_US"
            }
          ],
          "source": {
            "advisory": "HPESBNW05134",
            "discovery": "INTERNAL"
          },
          "title": "Authenticated Sensitive Information Disclosure Vulnerabilities in AOS-CX",
          "x_generator": {
            "engine": "Vulnogram 0.2.0"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "eb103674-0d28-4225-80f8-39fb86215de0",
        "assignerShortName": "hpe",
        "cveId": "CVE-2026-73775",
        "datePublished": "2026-09-01T20:28:44.155Z",
        "dateReserved": "2026-08-13T16:39:09.490Z",
        "dateUpdated": "2026-09-03T14:11:33.533Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-73774 (GCVE-0-2026-73774)

    Vulnerability from cvelistv5 – Published: 2026-09-01 20:28 – Updated: 2026-09-02 12:44
    VLAI
    Title
    Unauthenticated Buffer Overflow Vulnerability leads to Sensitive Information Disclosure in AOS-CX
    Summary
    A buffer overflow vulnerability exists in the underlying operating system of AOS-CX that could lead to unauthenticated disclosure of sensitive information by sending specially crafted packets to the affected system. Successful exploitation of this vulnerability could result in limited disclosure or modification of information and disruption of the affected system.
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-09-02 12:44 UTC
    CWE
    • CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
    Assigner
    Impacted products
    Vendor Product Version
    Hewlett Packard Enterprise (HPE) AOS-CX Affected: 10.18.0000 , ≤ 10.18.0001 (semver)
    Affected: 10.17.0000 , ≤ 10.17.1021 (semver)
    Affected: 10.16.0000 , ≤ 10.16.1051 (semver)
    Affected: 10.13.0000 , ≤ 10.13.1180 (semver)
    Affected: 10.10.0000 , ≤ 10.10.1180 (semver)
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-73774",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-09-02T12:44:08.078407Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "problemTypes": [
              {
                "descriptions": [
                  {
                    "cweId": "CWE-120",
                    "description": "CWE-120 Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
                    "lang": "en",
                    "type": "CWE"
                  }
                ]
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-09-02T12:44:11.319Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "affected",
              "product": "AOS-CX",
              "vendor": "Hewlett Packard Enterprise (HPE)",
              "versions": [
                {
                  "lessThanOrEqual": "10.18.0001",
                  "status": "affected",
                  "version": "10.18.0000",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.17.1021",
                  "status": "affected",
                  "version": "10.17.0000",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.16.1051",
                  "status": "affected",
                  "version": "10.16.0000",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.13.1180",
                  "status": "affected",
                  "version": "10.13.0000",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.10.1180",
                  "status": "affected",
                  "version": "10.10.0000",
                  "versionType": "semver"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "reporter",
              "value": "This vulnerability was discovered by internal security research at HPE Networking."
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "A buffer overflow vulnerability exists in the underlying operating system of AOS-CX that could lead to unauthenticated disclosure of sensitive information by sending specially crafted packets to the affected system. Successful exploitation of this vulnerability could result in limited disclosure or modification of information and disruption of the affected system."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "ADJACENT_NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 7.6,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "LOW",
                "integrityImpact": "LOW",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-09-01T20:28:42.765Z",
            "orgId": "eb103674-0d28-4225-80f8-39fb86215de0",
            "shortName": "hpe"
          },
          "references": [
            {
              "url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05134en_us\u0026docLocale=en_US"
            }
          ],
          "source": {
            "advisory": "HPESBNW05134",
            "discovery": "INTERNAL"
          },
          "title": "Unauthenticated Buffer Overflow Vulnerability leads to Sensitive Information Disclosure in AOS-CX",
          "x_generator": {
            "engine": "Vulnogram 0.2.0"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "eb103674-0d28-4225-80f8-39fb86215de0",
        "assignerShortName": "hpe",
        "cveId": "CVE-2026-73774",
        "datePublished": "2026-09-01T20:28:42.765Z",
        "dateReserved": "2026-08-13T16:39:09.490Z",
        "dateUpdated": "2026-09-02T12:44:11.319Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-73773 (GCVE-0-2026-73773)

    Vulnerability from cvelistv5 – Published: 2026-09-01 20:28 – Updated: 2026-09-02 15:40
    VLAI
    Title
    Unauthenticated Denial-of-Service (DoS) Vulnerability in AOS-CX
    Summary
    An unauthenticated Denial-of-Service (DoS) vulnerability exists in the API endpoint of AOS-CX. Successful exploitation of this vulnerability results in the ability to interrupt the normal operation of the affected service.
    SSVC
    Exploitation: none Automatable: yes Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-09-02 15:40 UTC
    CWE
    • CWE-400 - Uncontrolled Resource Consumption
    Assigner
    Impacted products
    Vendor Product Version
    Hewlett Packard Enterprise (HPE) AOS-CX Affected: 10.18.0000 , ≤ 10.18.0001 (semver)
    Affected: 10.17.0000 , ≤ 10.17.1021 (semver)
    Affected: 10.16.0000 , ≤ 10.16.1051 (semver)
    Affected: 10.13.0000 , ≤ 10.13.1180 (semver)
    Affected: 10.10.0000 , ≤ 10.10.1180 (semver)
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-73773",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "yes"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-09-02T15:40:19.814604Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "problemTypes": [
              {
                "descriptions": [
                  {
                    "cweId": "CWE-400",
                    "description": "CWE-400 Uncontrolled Resource Consumption",
                    "lang": "en",
                    "type": "CWE"
                  }
                ]
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-09-02T15:40:47.628Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "affected",
              "product": "AOS-CX",
              "vendor": "Hewlett Packard Enterprise (HPE)",
              "versions": [
                {
                  "lessThanOrEqual": "10.18.0001",
                  "status": "affected",
                  "version": "10.18.0000",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.17.1021",
                  "status": "affected",
                  "version": "10.17.0000",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.16.1051",
                  "status": "affected",
                  "version": "10.16.0000",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.13.1180",
                  "status": "affected",
                  "version": "10.13.0000",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.10.1180",
                  "status": "affected",
                  "version": "10.10.0000",
                  "versionType": "semver"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "reporter",
              "value": "This vulnerability was discovered by internal security research at HPE Networking."
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "An unauthenticated Denial-of-Service (DoS) vulnerability exists in the API endpoint of AOS-CX. Successful exploitation of this vulnerability results in the ability to interrupt the normal operation of the affected service."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 7.5,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "NONE",
                "integrityImpact": "NONE",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-09-01T20:28:41.344Z",
            "orgId": "eb103674-0d28-4225-80f8-39fb86215de0",
            "shortName": "hpe"
          },
          "references": [
            {
              "url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05134en_us\u0026docLocale=en_US"
            }
          ],
          "source": {
            "advisory": "HPESBNW05134",
            "discovery": "INTERNAL"
          },
          "title": "Unauthenticated Denial-of-Service (DoS) Vulnerability in AOS-CX",
          "x_generator": {
            "engine": "Vulnogram 0.2.0"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "eb103674-0d28-4225-80f8-39fb86215de0",
        "assignerShortName": "hpe",
        "cveId": "CVE-2026-73773",
        "datePublished": "2026-09-01T20:28:41.344Z",
        "dateReserved": "2026-08-13T16:39:09.490Z",
        "dateUpdated": "2026-09-02T15:40:47.628Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-73772 (GCVE-0-2026-73772)

    Vulnerability from cvelistv5 – Published: 2026-09-01 20:28 – Updated: 2026-09-02 12:44
    VLAI
    Title
    Unauthenticated Buffer Overflow Vulnerabilities lead to Denial-of-Service in AOS-CX
    Summary
    Buffer overflow vulnerabilities exist in an underlying service of AOS-CX that could lead to an unauthenticated denial-of-service condition by sending specially crafted packets to the affected device. Successful exploitation of these vulnerabilities results in a disruption of normal operation of the underlying operating system.
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-09-02 12:44 UTC
    CWE
    • CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
    Assigner
    Impacted products
    Vendor Product Version
    Hewlett Packard Enterprise (HPE) AOS-CX Affected: 10.18.0000 , ≤ 10.18.0001 (semver)
    Affected: 10.17.0000 , ≤ 10.17.1021 (semver)
    Affected: 10.16.0000 , ≤ 10.16.1051 (semver)
    Affected: 10.13.0000 , ≤ 10.13.1180 (semver)
    Affected: 10.10.0000 , ≤ 10.10.1180 (semver)
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-73772",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-09-02T12:44:42.820779Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "problemTypes": [
              {
                "descriptions": [
                  {
                    "cweId": "CWE-120",
                    "description": "CWE-120 Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
                    "lang": "en",
                    "type": "CWE"
                  }
                ]
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-09-02T12:44:46.104Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "affected",
              "product": "AOS-CX",
              "vendor": "Hewlett Packard Enterprise (HPE)",
              "versions": [
                {
                  "lessThanOrEqual": "10.18.0001",
                  "status": "affected",
                  "version": "10.18.0000",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.17.1021",
                  "status": "affected",
                  "version": "10.17.0000",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.16.1051",
                  "status": "affected",
                  "version": "10.16.0000",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.13.1180",
                  "status": "affected",
                  "version": "10.13.0000",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.10.1180",
                  "status": "affected",
                  "version": "10.10.0000",
                  "versionType": "semver"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "reporter",
              "value": "This vulnerability was discovered by internal security research at HPE Networking."
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "Buffer overflow vulnerabilities exist in an underlying service of AOS-CX that could lead to an unauthenticated denial-of-service condition by sending specially crafted packets to the affected device. Successful exploitation of these vulnerabilities results in a disruption of normal operation of the underlying operating system."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "ADJACENT_NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 6.5,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "NONE",
                "integrityImpact": "NONE",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-09-01T20:28:40.011Z",
            "orgId": "eb103674-0d28-4225-80f8-39fb86215de0",
            "shortName": "hpe"
          },
          "references": [
            {
              "url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05134en_us\u0026docLocale=en_US"
            }
          ],
          "source": {
            "advisory": "HPESBNW05134",
            "discovery": "INTERNAL"
          },
          "title": "Unauthenticated Buffer Overflow Vulnerabilities lead to Denial-of-Service in AOS-CX",
          "x_generator": {
            "engine": "Vulnogram 0.2.0"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "eb103674-0d28-4225-80f8-39fb86215de0",
        "assignerShortName": "hpe",
        "cveId": "CVE-2026-73772",
        "datePublished": "2026-09-01T20:28:40.011Z",
        "dateReserved": "2026-08-13T16:39:09.490Z",
        "dateUpdated": "2026-09-02T12:44:46.104Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-73771 (GCVE-0-2026-73771)

    Vulnerability from cvelistv5 – Published: 2026-09-01 20:28 – Updated: 2026-09-03 03:56
    VLAI
    Title
    Improper Authentication Handling in AOS-CX Management Interface and API
    Summary
    An authentication vulnerability exists in the AOS-CX management interface and API that may allow improper authentication processing. An unauthenticated remote attacker could exploit this vulnerability under specific conditions to bypass authentication controls or exhaust system resources. Successful exploitation could result in unauthorized access or denial of service affecting the management interface.
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-09-02 00:00 UTC
    CWE
    • CWE-287 - Improper Authentication
    Assigner
    Impacted products
    Vendor Product Version
    Hewlett Packard Enterprise (HPE) AOS-CX Affected: 10.18.0000 , ≤ 10.18.0001 (semver)
    Affected: 10.17.0000 , ≤ 10.17.1021 (semver)
    Affected: 10.16.0000 , ≤ 10.16.1051 (semver)
    Affected: 10.13.0000 , ≤ 10.13.1180 (semver)
    Affected: 10.10.0000 , ≤ 10.10.1180 (semver)
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-73771",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-09-02T00:00:00+00:00",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "problemTypes": [
              {
                "descriptions": [
                  {
                    "cweId": "CWE-287",
                    "description": "CWE-287 Improper Authentication",
                    "lang": "en",
                    "type": "CWE"
                  }
                ]
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-09-03T03:56:20.795Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "affected",
              "product": "AOS-CX",
              "vendor": "Hewlett Packard Enterprise (HPE)",
              "versions": [
                {
                  "lessThanOrEqual": "10.18.0001",
                  "status": "affected",
                  "version": "10.18.0000",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.17.1021",
                  "status": "affected",
                  "version": "10.17.0000",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.16.1051",
                  "status": "affected",
                  "version": "10.16.0000",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.13.1180",
                  "status": "affected",
                  "version": "10.13.0000",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.10.1180",
                  "status": "affected",
                  "version": "10.10.0000",
                  "versionType": "semver"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "reporter",
              "value": "This vulnerability was discovered by internal security research at HPE Networking."
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "An authentication vulnerability exists in the AOS-CX management interface and API that may allow improper authentication processing. An unauthenticated remote attacker could exploit this vulnerability under specific conditions to bypass authentication controls or exhaust system resources. Successful exploitation could result in unauthorized access or denial of service affecting the management interface."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "HIGH",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 7.5,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "REQUIRED",
                "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-09-01T20:28:33.120Z",
            "orgId": "eb103674-0d28-4225-80f8-39fb86215de0",
            "shortName": "hpe"
          },
          "references": [
            {
              "url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05134en_us\u0026docLocale=en_US"
            }
          ],
          "source": {
            "advisory": "HPESBNW05134",
            "discovery": "INTERNAL"
          },
          "title": "Improper Authentication Handling in AOS-CX Management Interface and API",
          "x_generator": {
            "engine": "Vulnogram 0.2.0"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "eb103674-0d28-4225-80f8-39fb86215de0",
        "assignerShortName": "hpe",
        "cveId": "CVE-2026-73771",
        "datePublished": "2026-09-01T20:28:33.120Z",
        "dateReserved": "2026-08-13T16:39:09.490Z",
        "dateUpdated": "2026-09-03T03:56:20.795Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-73770 (GCVE-0-2026-73770)

    Vulnerability from cvelistv5 – Published: 2026-09-01 20:28 – Updated: 2026-09-03 03:56
    VLAI
    Title
    Authenticated Arbitrary File Write Vulnerability Leading to Remote Code Execution in AOS-CX
    Summary
    An authenticated arbitrary file write vulnerability exists in AOS-CX. Successful exploitation could allow an authenticated malicious actor, under specific conditions outside the attacker's control and following a required action by another user, to create or modify arbitrary files and execute arbitrary commands as a privileged user on the underlying operating system.
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-09-02 00:00 UTC
    CWE
    • CWE-73 - External Control of File Name or Path
    Assigner
    Impacted products
    Vendor Product Version
    Hewlett Packard Enterprise (HPE) AOS-CX Affected: 10.18.0000 , ≤ 10.18.0001 (semver)
    Affected: 10.17.0000 , ≤ 10.17.1021 (semver)
    Affected: 10.16.0000 , ≤ 10.16.1051 (semver)
    Affected: 10.13.0000 , ≤ 10.13.1180 (semver)
    Affected: 10.10.0000 , ≤ 10.10.1180 (semver)
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-73770",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-09-02T00:00:00+00:00",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "problemTypes": [
              {
                "descriptions": [
                  {
                    "cweId": "CWE-73",
                    "description": "CWE-73 External Control of File Name or Path",
                    "lang": "en",
                    "type": "CWE"
                  }
                ]
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-09-03T03:56:02.349Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "affected",
              "product": "AOS-CX",
              "vendor": "Hewlett Packard Enterprise (HPE)",
              "versions": [
                {
                  "lessThanOrEqual": "10.18.0001",
                  "status": "affected",
                  "version": "10.18.0000",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.17.1021",
                  "status": "affected",
                  "version": "10.17.0000",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.16.1051",
                  "status": "affected",
                  "version": "10.16.0000",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.13.1180",
                  "status": "affected",
                  "version": "10.13.0000",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.10.1180",
                  "status": "affected",
                  "version": "10.10.0000",
                  "versionType": "semver"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "reporter",
              "value": "This vulnerability was discovered by internal security research at HPE Networking."
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "An authenticated arbitrary file write vulnerability exists in AOS-CX. Successful exploitation could allow an authenticated malicious actor, under specific conditions outside the attacker\u0027s control and following a required action by another user, to create or modify arbitrary files and execute arbitrary commands as a privileged user on the underlying operating system."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "HIGH",
                "attackVector": "ADJACENT_NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 7.3,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "HIGH",
                "scope": "CHANGED",
                "userInteraction": "REQUIRED",
                "vectorString": "CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-09-01T20:28:31.725Z",
            "orgId": "eb103674-0d28-4225-80f8-39fb86215de0",
            "shortName": "hpe"
          },
          "references": [
            {
              "url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05134en_us\u0026docLocale=en_US"
            }
          ],
          "source": {
            "advisory": "HPESBNW05134",
            "discovery": "INTERNAL"
          },
          "title": "Authenticated Arbitrary File Write Vulnerability Leading to Remote Code Execution in AOS-CX",
          "x_generator": {
            "engine": "Vulnogram 0.2.0"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "eb103674-0d28-4225-80f8-39fb86215de0",
        "assignerShortName": "hpe",
        "cveId": "CVE-2026-73770",
        "datePublished": "2026-09-01T20:28:31.725Z",
        "dateReserved": "2026-08-13T16:39:09.490Z",
        "dateUpdated": "2026-09-03T03:56:02.349Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-73768 (GCVE-0-2026-73768)

    Vulnerability from cvelistv5 – Published: 2026-09-01 20:28 – Updated: 2026-09-03 03:56
    VLAI
    Title
    Local Privilege Escalation in AOS-CX Command Line Interface
    Summary
    A vulnerability exists in the command line interface of AOS-CX that may allow for improper processing of malformed input. Successful exploitation could result in the execution of arbitrary commands with root privileges.
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-09-02 00:00 UTC
    CWE
    • CWE-20 - Improper Input Validation
    Assigner
    Impacted products
    Vendor Product Version
    Hewlett Packard Enterprise (HPE) AOS-CX Affected: 10.18.0000 , ≤ 10.18.0001 (semver)
    Affected: 10.17.0000 , ≤ 10.17.1021 (semver)
    Affected: 10.16.0000 , ≤ 10.16.1051 (semver)
    Affected: 10.13.0000 , ≤ 10.13.1180 (semver)
    Affected: 10.10.0000 , ≤ 10.10.1180 (semver)
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-73768",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-09-02T00:00:00+00:00",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "problemTypes": [
              {
                "descriptions": [
                  {
                    "cweId": "CWE-20",
                    "description": "CWE-20 Improper Input Validation",
                    "lang": "en",
                    "type": "CWE"
                  }
                ]
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-09-03T03:56:00.839Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "affected",
              "product": "AOS-CX",
              "vendor": "Hewlett Packard Enterprise (HPE)",
              "versions": [
                {
                  "lessThanOrEqual": "10.18.0001",
                  "status": "affected",
                  "version": "10.18.0000",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.17.1021",
                  "status": "affected",
                  "version": "10.17.0000",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.16.1051",
                  "status": "affected",
                  "version": "10.16.0000",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.13.1180",
                  "status": "affected",
                  "version": "10.13.0000",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.10.1180",
                  "status": "affected",
                  "version": "10.10.0000",
                  "versionType": "semver"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "reporter",
              "value": "This vulnerability was discovered by internal security research at HPE Networking."
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "A vulnerability exists in the command line interface of AOS-CX that may allow for improper processing of malformed input. Successful exploitation could result in the execution of arbitrary commands with root privileges."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 7.3,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "userInteraction": "REQUIRED",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-09-01T20:28:29.900Z",
            "orgId": "eb103674-0d28-4225-80f8-39fb86215de0",
            "shortName": "hpe"
          },
          "references": [
            {
              "url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05134en_us\u0026docLocale=en_US"
            }
          ],
          "source": {
            "advisory": "HPESBNW05134",
            "discovery": "INTERNAL"
          },
          "title": "Local Privilege Escalation in AOS-CX Command Line Interface",
          "x_generator": {
            "engine": "Vulnogram 0.2.0"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "eb103674-0d28-4225-80f8-39fb86215de0",
        "assignerShortName": "hpe",
        "cveId": "CVE-2026-73768",
        "datePublished": "2026-09-01T20:28:29.900Z",
        "dateReserved": "2026-08-13T16:38:49.645Z",
        "dateUpdated": "2026-09-03T03:56:00.839Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }