VulnerabilityBleeping Computer
9.8 — CRITICAL
HPE patches critical ArubaOS-CX remote code execution flaw
Hewlett Packard Enterprise (HPE) has patched a critical vulnerability in the ArubaOS-CX network operating system that could lead to remote code execution. [...]
🤖 AI BriefingAuto-generated threat analysis
🔍Threat Overview
Hewlett Packard Enterprise (HPE) has patched a critical remote code execution flaw in the ArubaOS-CX network operating system, which could be exploited by unauthenticated remote attackers sending specially crafted packets to an affected daemon process.
⚙️Technical Details
💥Impact Assessment
Severity: critical
Who Is at Risk
large businesses, government agencies, universities, healthcare organizations, data centers, and service providers using ArubaOS-CX
🛡️Recommended Actions
1Upgrade to a fixed release of ArubaOS-CX (10.18.1002+, 10.17.1030+, etc.)
2Implement strict input validation and sanitization for all user inputs
3Regularly monitor network traffic for suspicious activity
📦Affected Products
ArubaOS-CX network operating system
🔐NVD Verified DataVERIFIED
CVE-2026-73749 ↗CVSS 9.8 — CRITICAL
Attack Vector
NETWORK
Complexity
LOW
Vector String
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HWeaknesses
CWE-284
CVE-2026-73750 ↗CVSS 8.8 — HIGH
Attack Vector
NETWORK
Complexity
LOW
Vector String
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HWeaknesses
CWE-284
CVE-2026-73751 ↗CVSS 8.8 — HIGH
Attack Vector
NETWORK
Complexity
LOW
Vector String
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HWeaknesses
CWE-77
CVE-2026-73752 ↗CVSS 8.8 — HIGH
Attack Vector
ADJACENT_NETWORK
Complexity
LOW
Vector String
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HWeaknesses
CWE-22
CVE-2026-73753 ↗CVSS 8.8 — HIGH
Attack Vector
NETWORK
Complexity
LOW
Vector String
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HWeaknesses
CWE-78
Read the full article
This is a curated summary. The complete article is available at Bleeping Computer.