CVE-2026-73762

MediumCVSS 6.6/10Last modified Sep 4, 2026

Description

A vulnerability has been identified in the API endpoint of AOS-CX that could allow a remote actor to circumvent existing access controls. In some cases this could enable unauthorized access to management functionality that should be restricted by the configured access control policy.

Metrics

CVSS 3.1 6.6/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L

Weakness enumeration

CWE-284

Affected software

No affected versions have been published.

Timeline

Published: Sep 1, 2026
Last modified: Sep 4, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-737638.8A vulnerability exists in a management component that could allow an unauthenticated adjacent attacker to execute arbitrary commands. Succes CVE-2026-737647.1Vulnerabilities have been identified in the operating system of AOS-CX switches that could potentially allow an unauthenticated remote actor CVE-2026-737657.2Authenticated path traversal vulnerabilities exist in API endpoints of AOS-CX. Successful exploitation of these vulnerabilities allows an at CVE-2026-737667.2Command injection vulnerabilities in the API endpoint of AOS-CX could allow an authenticated remote attacker with administrative privileges CVE-2026-737677.2Authenticated command injection vulnerabilities exist in the command line interface of AOS-CX. Successful exploitation of these vulnerabilit CVE-2026-737687.3A vulnerability exists in the command line interface of AOS-CX that may allow for improper processing of malformed input. Successful exploit CVE-2026-737697.2A vulnerability in the web-based management interface of vulnerable CPPM systems could allow an authenticated remote attacker to achieve rem CVE-2026-73775.4GitLab has remediated an issue in GitLab EE affecting all versions from 18.7 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 t CVE-2026-737707.3An authenticated arbitrary file write vulnerability exists in AOS-CX. Successful exploitation could allow an authenticated malicious actor, CVE-2026-737717.5An authentication vulnerability exists in the AOS-CX management interface and API that may allow improper authentication processing. An unau CVE-2026-737726.5Buffer overflow vulnerabilities exist in an underlying service of AOS-CX that could lead to an unauthenticated denial-of-service condition b CVE-2026-737737.5An unauthenticated Denial-of-Service (DoS) vulnerability exists in the API endpoint of AOS-CX. Successful exploitation of this vulnerability