Back to the CVE list
CVE-2026-73767

Authenticated Remote Command Injection Vulnerabilities in AOS-CX Command Line Interface

CVSS score

7.2

EPSS probability

%1.7

Risk score

0.1

Published

1 mo ago

OverviewPublic Exploits (0)NewsroomVulnerability Timeline
Official patch verified

Etkilenen ürün ve sürüm için yayımlanan güvenlik güncellemesini uygulayın.

Impact on My Inventory

Only the personal products you have added to your account are assessed; an organisation's inventory does not appear here.

Checking session…

Vulnerability description

DayBreach CVE AI Research

CVE-2026-73767 has vendor, distribution, patch and security-source records on file. We can compare them and prepare an explanation linked to the evidence.

Authenticated command injection vulnerabilities exist in the command line interface of AOS-CX. Successful exploitation of these vulnerabilities results in the ability to execute arbitrary commands as a privileged user on the underlying operating system.

IMPACT: Affected Products and Software

Affected Products

The following products are affected by CVE-2026-73767 vulnerability. Where our threat engine knows the exact affected versions, they are listed below.

IDVENDORPRODUCTACTION
1Hewlett Packard Enterprise (HPE)AOS-CX View
2hpearubaos-cx View
3hpearubaos-cx View
4hpearubaos-cx View
5hpearubaos-cx View
6hpearubaos-cx View
7hpearuba cx 10000-48y6c (r8p13a) View
8hpearuba cx 10000-48y6c (r8p14a) View
9hpearuba cx 10000-48y6c (s0f98a) View
10hpearuba cx 10040 (s4r58a) View
11hpearuba cx 10040 32p (s4r54a) View
12hpearuba cx 10040 32p (s4r55a) View
13hpearuba cx 10040 32p (s4r56a) View
14hpearuba cx 4100i 12-port (jl817a) View
15hpearuba cx 4100i 24-port (jl818a) View
16hpearuba cx 6000 12g (r8n89a) View
17hpearuba cx 6000 12p (r8n89b) View
18hpearuba cx 6000 12p (s4r21a) View
19hpearuba cx 6000 24g (r8n87a) View
20hpearuba cx 6000 24g (r8n88a) View
21hpearuba cx 6000 24p (r8n87b) View
22hpearuba cx 6000 24p (r8n88b) View
23hpearuba cx 6000 24p (s4r26a) View
24hpearuba cx 6000 24p (s4r27a) View
25hpearuba cx 6000 48g (r8n85a) View
26hpearuba cx 6000 48g (r8n86a) View
27hpearuba cx 6000 48g (r9y03a) View
28hpearuba cx 6000 48p (r8n85b) View
29hpearuba cx 6000 48p (r8n86b) View
30hpearuba cx 6000 48p (r9y03b) View
31hpearuba cx 6000 48p (s4r20a) View
32hpearuba cx 6000 48p (s4r24a) View
33hpearuba cx 6000 48p (s4r25a) View
34hpearuba cx 6000 8p (s4r22a) View
35hpearuba cx 6000 8p (s4r23a) View
36hpearuba cx 6000 8p (s4r28a) View
37hpearuba cx 6000 8p (s4r29a) View
38hpearuba cx 6100 12g (jl679a) View
39hpearuba cx 6100 24g (jl677a) View
40hpearuba cx 6100 24g (jl678a) View
41hpearuba cx 6100 48g (jl675a) View
42hpearuba cx 6100 48g (jl676a) View
43hpearuba cx 6100 48g (r9y04a) View
44hpearuba cx 6200f 12g (r8q72a) View
45hpearuba cx 6200f 12g (r8v13a) View
46hpearuba cx 6200f 24g (jl724b) View
47hpearuba cx 6200f 24g (jl725b) View
48hpearuba cx 6200f 24g (s0g13a) View
49hpearuba cx 6200f 24g (s0g14a) View
50hpearuba cx 6200f 24g (s0m81a) View
51hpearuba cx 6200f 24g (s0m82a) View
52hpearuba cx 6200f 24g (s0m86a) View
53hpearuba cx 6200f 24g (s0m87a) View
54hpearuba cx 6200f 48g (jl726b) View
55hpearuba cx 6200f 48g (jl727b) View
56hpearuba cx 6200f 48g (jl728b) View
57hpearuba cx 6200f 48g (s0g15a) View
58hpearuba cx 6200f 48g (s0g16a) View
59hpearuba cx 6200f 48g (s0g17a) View
60hpearuba cx 6200f 48g (s0m83a) View
61hpearuba cx 6200f 48g (s0m84a) View
62hpearuba cx 6200f 48g (s0m85a) View
63hpearuba cx 6200f 48g (s0m88a) View
64hpearuba cx 6200f 48g (s0m89a) View
65hpearuba cx 6200f 48g (s0m90a) View
66hpearuba cx 6200m 24g (r8q67a) View
67hpearuba cx 6200m 24g (r8q68a) View
68hpearuba cx 6200m 24g (r8v08a) View
69hpearuba cx 6200m 24g (r8v09a) View
70hpearuba cx 6200m 36g (r8q71a) View
71hpearuba cx 6200m 36g (r8v12a) View
72hpearuba cx 6200m 48g (r8q69a) View
73hpearuba cx 6200m 48g (r8q70a) View
74hpearuba cx 6200m 48g (r8v10a) View
75hpearuba cx 6200m 48g (r8v11a) View
76hpearuba cx 6300f 24 (jl666a) View
77hpearuba cx 6300f 24 (jl668a) View
78hpearuba cx 6300f 24p (s0g96a) View
79hpearuba cx 6300f 24p (s0g98a) View
80hpearuba cx 6300f 48 (jl665a) View
81hpearuba cx 6300f 48 (jl667a) View
82hpearuba cx 6300f 48p (s0g95a) View
83hpearuba cx 6300f 48p (s0g97a) View
84hpearuba cx 6300m 16p (s4p41a) View
85hpearuba cx 6300m 16p (s4p45a) View
86hpearuba cx 6300m 24 (jl658a) View
87hpearuba cx 6300m 24 (jl660a) View
88hpearuba cx 6300m 24 (jl662a) View
89hpearuba cx 6300m 24 (jl664a) View
90hpearuba cx 6300m 24p (r8s89a) View
91hpearuba cx 6300m 24p (r8s92a) View
92hpearuba cx 6300m 24p (s0f99a) View
93hpearuba cx 6300m 24p (s0g01a) View
94hpearuba cx 6300m 24p (s0g03a) View
95hpearuba cx 6300m 24p (s0g05a) View
96hpearuba cx 6300m 24p (s4p44a) View
97hpearuba cx 6300m 24p (s4p48a) View
98hpearuba cx 6300m 24p (s5z46a) View
99hpearuba cx 6300m 32p (s4p42a) View
100hpearuba cx 6300m 32p (s4p46a) View
101hpearuba cx 6300m 48 (jl659a) View
102hpearuba cx 6300m 48 (jl661a) View
103hpearuba cx 6300m 48 (jl663a) View
104hpearuba cx 6300m 48 (jl762a) View
105hpearuba cx 6300m 48p (r8s90a) View
106hpearuba cx 6300m 48p (s0g00a) View
107hpearuba cx 6300m 48p (s0g02a) View
108hpearuba cx 6300m 48p (s0g04a) View
109hpearuba cx 6300m 48p (s0g06a) View
110hpearuba cx 6300m 48p (s0x44a) View
111hpearuba cx 6300m 48p (s4p43a) View
112hpearuba cx 6300m 48p (s4p47a) View
113hpearuba cx 6300m 48sr5 (r8s91a) View
114hpearuba cx 6405 (r0x26a) View
115hpearuba cx 6405 48sfp+8sfp56 (r0x30a) View
116hpearuba cx 6405 96g (r0x29a) View
117hpearuba cx 6405 v2 (r0x26c) View
118hpearuba cx 6410 (r0x27a) View
119hpearuba cx 6410 96g (jl741a) View
120hpearuba cx 6410 v2 (r0x27c) View
121hpearuba cx 8320 32 (jl579a) View
122hpearuba cx 8320 48 (jl479a) View
123hpearuba cx 8320 48 (jl581a) View
124hpearuba cx 8325-32c (jl626a) View
125hpearuba cx 8325-32c (jl627a) View
126hpearuba cx 8325-48y8c (jl624a) View
127hpearuba cx 8325-48y8c (jl625a) View
128hpearuba cx 8325-48y8c (jl858a) View
129hpearuba cx 8325h-16c (s4b22a) View
130hpearuba cx 8325h-16c (s4b24a) View
131hpearuba cx 8325h-18y4c (s4b21a) View
132hpearuba cx 8325h-18y4c (s4b23a) View
133hpearuba cx 8325p-32c (s0g07a) View
134hpearuba cx 8325p-32c (s0g08a) View
135hpearuba cx 8360-12c (jl708c) View
136hpearuba cx 8360-12c (jl709c) View
137hpearuba cx 8360-16y2c (jl702c) View
138hpearuba cx 8360-16y2c (jl703c) View
139hpearuba cx 8360-24xf2c (jl710c) View
140hpearuba cx 8360-24xf2c (jl711c) View
141hpearuba cx 8360-32y4c (jl700c) View
142hpearuba cx 8360-32y4c (jl701c) View
143hpearuba cx 8360-48xt4c (jl706c) View
144hpearuba cx 8360-48xt4c (jl707c) View
145hpearuba cx 8360-48y6c (jl704c) View
146hpearuba cx 8360-48y6c (jl705c) View
147hpearuba cx 8400 (jl376a) View
148hpearuba cx 8400 8-slot chassis (jl375a) View
149hpearuba cx 9300 (r8z97a) View
150hpearuba cx 9300 (r8z98a) View
151hpearuba cx 9300 (r8z99a) View
152hpearuba cx 9300 (r9a00a) View
153hpearuba cx 9300 32d (r8z96a) View
154hpearuba cx 9300 32d (r9a29a) View
155hpearuba cx 9300 32d (r9a30a) View
156hpearuba cx 9300s 32p (s0f81a) View
157hpearuba cx 9300s 32p (s0f82a) View
158hpearuba cx 9300s 32p (s0f83a) View
159hpearuba cx 9300s 32p (s0f84a) View
160hpearuba cx 9300s 32p (s0f87a) View
161hpearuba cx 9300s 32p (s0f88a) View
Total affected vendors: 2|Products: 161

RED HAT CSAF/VEX: Product Impact Check

Red Hat has not yet published a CSAF/VEX impact record for this CVE. This does not mean “not affected”.

SCORING: CVSS from Multiple Sources

CVSS Scores

The Common Vulnerability Scoring System is a standardised framework for assessing the severity of vulnerabilities in software and systems. We collect and display CVSS scores from several sources for each CVE.

SCOREVERSIONSEVERITYVECTORSOURCE
7.2CVSS V31HIGHCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HNVD
7.2CVSS V3_1HIGHCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HCVE CNA

Patch and Remediation Guide

Solution & Remediation Advisory

Patch verified

1 doğrulanmış yama veya düzeltilmiş sürüm kanıtı bulundu.

nvd

NVD tarafından Patch olarak etiketlenmiş referans

Open source
Confirm the affected product and version against the source evidence above.
Restrict access to internet-facing services and apply network segmentation.
Apply the official update named in the evidence only to the matching product and version.
Monitor server logs and network endpoints for signs of anomalous execution.

Public exploit and active exploitation status

Verified exploit intelligence

No verified public PoC, exploit repository or Metasploit module has been found for this CVE yet.

Weakness Classification and Attack Patterns (CWE & CAPEC)

CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorises the common flaws or weaknesses that can lead to vulnerabilities. CVE-2026-73767 is associated with the following CWEs:

CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2026-73767 weaknesses.

CAPEC-66: SQL InjectionCAPEC-126: Path TraversalCAPEC-28: OS Command Injection

Attack Vector and Accessibility

ExposureAğ üzerinden
PermissionsHigh
UserGerekmiyor

Official Sources and Advisories

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05134en_us&docLocale=en_USvendor-advisory

CVSS Vector Radar Chart

7.2 / 10
Attack VectorNetworkComplexityLowPrivilegesHighUser Interact.NoneConfidentialityLowIntegrityNoneAvailabilityHigh

Vulnerability Scoring Details

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack VectorNetwork
Attack ComplexityLow
Privileges RequiredHigh privileges
User InteractionNone required
Confidentiality (Gizlilik)Low
Integrity (Bütünlük)None
Availability (Erişilebilirlik)High

Yama doğrulandı

1 doğrulanmış yama veya düzeltilmiş sürüm kanıtı bulundu.

Follow the vendor

HP
Hewlett Packard Enterprise (HPE) logo
Hewlett Packard Enterprise (HPE)
H
hpe logo
hpe

Weakness Type (CWE & CAPEC)

CWE-78

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free keyDocumentation
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.enginteksut.com.tr/api/v1/intel/cves/CVE-2026-73767"