CVE-2026-73759

MediumCVSS 6.5/10Last modified Sep 22, 2026

Description

Vulnerabilities in AOS-CX could allow an unauthenticated remote malicious actor to trigger a denial-of-service condition by sending specially crafted packets. Successful exploitation of these vulnerabilities results in disruption of normal operation on affected devices.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-400

Affected software

No affected versions have been published.

Timeline

Published: Sep 1, 2026
Last modified: Sep 22, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-73767.5Crash in sharkd 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service CVE-2026-737606.5An authenticated Path Traversal vulnerability exists in AOS-CX. Successful exploitation of this vulnerability allows an attacker to read arb CVE-2026-737616.5An out-of-bounds read vulnerability exists in the underlying operating system of AOS-CX that could lead to unauthenticated information discl CVE-2026-737626.6A vulnerability has been identified in the API endpoint of AOS-CX that could allow a remote actor to circumvent existing access controls. In CVE-2026-737638.8A vulnerability exists in a management component that could allow an unauthenticated adjacent attacker to execute arbitrary commands. Succes CVE-2026-737647.1Vulnerabilities have been identified in the operating system of AOS-CX switches that could potentially allow an unauthenticated remote actor CVE-2026-737657.2Authenticated path traversal vulnerabilities exist in API endpoints of AOS-CX. Successful exploitation of these vulnerabilities allows an at CVE-2026-737667.2Command injection vulnerabilities in the API endpoint of AOS-CX could allow an authenticated remote attacker with administrative privileges CVE-2026-737677.2Authenticated command injection vulnerabilities exist in the command line interface of AOS-CX. Successful exploitation of these vulnerabilit CVE-2026-737687.3A vulnerability exists in the command line interface of AOS-CX that may allow for improper processing of malformed input. Successful exploit CVE-2026-737697.2A vulnerability in the web-based management interface of vulnerable CPPM systems could allow an authenticated remote attacker to achieve rem CVE-2026-73775.4GitLab has remediated an issue in GitLab EE affecting all versions from 18.7 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 t