CVE-2026-73754

MediumCVSS 5.3/10Last modified Sep 4, 2026

Description

Denial-of-service vulnerabilities exist in the command line interface of AOS-CX. Successful exploitation could allow an authenticated user to disrupt the normal operation of a vulnerable system.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-400

Affected software

No affected versions have been published.

Timeline

Published
Sep 1, 2026
Last modified
Sep 4, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-737555.7A privilege escalation vulnerability exists in the API endpoint of AOS-CX. Successful exploitation could allow an authenticated low-privilegCVE-2026-737565.9A vulnerability in an API endpoint of AOS-CX could allow a remote unauthenticated attacker to obtain sensitive information via a man-in-the-CVE-2026-737576.4A vulnerability in the web-based management interface of AOS-CX could allow an authenticated remote attacker to conduct a server-side requesCVE-2026-737586.5A privilege escalation vulnerability exists in the API endpoint of AOS-CX. Successful exploitation could allow an authenticated low privilegCVE-2026-737596.5Vulnerabilities in AOS-CX could allow an unauthenticated remote malicious actor to trigger a denial-of-service condition by sending speciallCVE-2026-73767.5Crash in sharkd 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of serviceCVE-2026-737606.5An authenticated Path Traversal vulnerability exists in AOS-CX. Successful exploitation of this vulnerability allows an attacker to read arbCVE-2026-737616.5An out-of-bounds read vulnerability exists in the underlying operating system of AOS-CX that could lead to unauthenticated information disclCVE-2026-737626.6A vulnerability has been identified in the API endpoint of AOS-CX that could allow a remote actor to circumvent existing access controls. InCVE-2026-737638.8A vulnerability exists in a management component that could allow an unauthenticated adjacent attacker to execute arbitrary commands. SuccesCVE-2026-737647.1Vulnerabilities have been identified in the operating system of AOS-CX switches that could potentially allow an unauthenticated remote actorCVE-2026-737657.2Authenticated path traversal vulnerabilities exist in API endpoints of AOS-CX. Successful exploitation of these vulnerabilities allows an at
CVE-2026-73754: Medium severity, CVSS 5.3 | Vulnix