PatchTheCVECVE-2026-73771: An authentication vulnerability exists in the AOS-CX management interface and API that may allow improper auth
CVE-2026-73771 is a high-severity flaw (CVSS 7.5) affecting arubaos-cx. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
An authentication vulnerability exists in the AOS-CX management interface and API that may allow improper authentication processing. An unauthenticated remote attacker could exploit this vulnerability under specific conditions to bypass authentication controls or exhaust system resources. Successful exploitation could result in unauthorized access or denial of service affecting the management interface.
Why this priority
- High severity
A fixed release or distro patch exists.
Risk facts
| CVSS score | 7.5 (High) |
| Attack vector | Network (remote) |
| Attack complexity | High |
| Privileges needed | None |
| User interaction | Required |
| EPSS exploit chance | 0.5% (top 59%) |
| CISA exploited list | No |
| Weakness | CWE-287 |
| Published | 2026-09-01 |
| Last modified | 2026-09-04 |
Last updated 2026-09-04 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2026-73771?
arubaos-cx: upgrade to newer than 10.17.1021. Exact commands for each OS are on this page.
Is CVE-2026-73771 being exploited?
CVE-2026-73771 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2026-73771 affect?
CVE-2026-73771 affects arubaos-cx. Severity is high (CVSS 7.5). An authentication vulnerability exists in the AOS-CX management interface and API that may allow improper authentication processing. An unauthenticated remote attacker could exploit this vulnerability under specific conditions to bypass aut
How urgent is CVE-2026-73771?
Priority 36/100. High severity
Related CVEs
- CVE-2026-44880 HIGH 8.8 UPGRADE A buffer overflow vulnerability was found in the command line interface of AOS-CX
- CVE-2026-63454 HIGH 7.2 UPGRADE An authenticated path traversal vulnerability exists in AOS-CX
- CVE-2026-63453 HIGH 7.2 UPGRADE Buffer overflow vulnerabilities exist in the command line interface of AOS-CX
- CVE-2026-73783 MEDIUM 4.9 UPGRADE Stack overflow vulnerabilities exist in an API endpoint of AOS-CX
- CVE-2026-73749 CRITICAL 9.8 UPGRADE Multiple vulnerabilities exist in a daemon of AOS-CX that may allow for improper processing of malformed input