CVE-2026-73767

CVE-2026-73767 is an authenticated command injection flaw (CWE-78) in the command line interface of HPE Aruba's AOS-CX network switch operating system. It is triggered by an attacker who already holds high-privilege (admin-level) credentials and submits crafted input to CLI commands over the network. Successful exploitation yields execution of arbitrary commands as a privileged user on the switch's underlying operating system, effectively giving full control of the device (high impact to confidentiality, integrity and availability). Any organization operating AOS-CX switches is potentially affected, though the high privilege requirement limits exposure to users with administrative CLI access. Exploitation has not been observed: there is no public proof-of-concept, the flaw is not in CISA's KEV catalog, and EPSS assigns roughly a 1% probability of exploitation within 30 days.

What to do: Apply the AOS-CX firmware update designated in HPE's security advisory for this CVE, since no fixed version numbers are given in the available data. Until patching, restrict switch management/CLI access to trusted administrative networks and audit for unexpected local or remote accounts with admin rights. No workarounds or exploitation activity are documented, so priority is moderate, but devices with broadly shared admin credentials should be patched first.