CVE-2026-73749: HPE ArubaOS-CX RCE
HPE patched CVE-2026-73749, a critical unauthenticated remote code execution flaw in ArubaOS-CX network switch software; affected devices need prompt updates.
HPE released patches for CVE-2026-73749, a critical unauthenticated remote code execution vulnerability in HPE Aruba Networking AOS-CX switch operating system. Published details are limited, but the flaw allows unauthenticated attackers to execute code on affected AOS-CX devices. Administrators running ArubaOS-CX should prioritize applying HPE's update.
- CVE-2026-73749 is a critical unauthenticated RCE in HPE ArubaOS-CX switch software
- HPE has shipped patches; affected AOS-CX deployments should update promptly
- CVEs
- CVE-2026-73749
- Vendors
- HPE
- Products
- ArubaOS-CX
- Organizations
- SOCRadar
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-73749 | Unauthenticated Remote Code Execution in HPE ArubaOS-CX | 9.8 | <1% |
From the original article

CVE-2026-73749: HPE ArubaOS-CX RCE HPE patched CVE-2026-73749, a critical unauthenticated Remote Code Execution (RCE) vulnerability in HPE Aruba Networking AOS-CX , also known as ArubaOS-CX . The flaw affects an AOS-CX d
By ameer · socradar.io
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.