CVE-2026-73763

HighCVSS 8.8/10Last modified Sep 10, 2026

Description

A vulnerability exists in a management component that could allow an unauthenticated adjacent attacker to execute arbitrary commands. Successful exploitation could result in remote execution of arbitrary commands in the context of the affected utility.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-77

Affected software

No affected versions have been published.

Timeline

Published: Sep 1, 2026
Last modified: Sep 10, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-737647.1Vulnerabilities have been identified in the operating system of AOS-CX switches that could potentially allow an unauthenticated remote actor CVE-2026-737657.2Authenticated path traversal vulnerabilities exist in API endpoints of AOS-CX. Successful exploitation of these vulnerabilities allows an at CVE-2026-737667.2Command injection vulnerabilities in the API endpoint of AOS-CX could allow an authenticated remote attacker with administrative privileges CVE-2026-737677.2Authenticated command injection vulnerabilities exist in the command line interface of AOS-CX. Successful exploitation of these vulnerabilit CVE-2026-737687.3A vulnerability exists in the command line interface of AOS-CX that may allow for improper processing of malformed input. Successful exploit CVE-2026-737697.2A vulnerability in the web-based management interface of vulnerable CPPM systems could allow an authenticated remote attacker to achieve rem CVE-2026-73775.4GitLab has remediated an issue in GitLab EE affecting all versions from 18.7 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 t CVE-2026-737707.3An authenticated arbitrary file write vulnerability exists in AOS-CX. Successful exploitation could allow an authenticated malicious actor, CVE-2026-737717.5An authentication vulnerability exists in the AOS-CX management interface and API that may allow improper authentication processing. An unau CVE-2026-737726.5Buffer overflow vulnerabilities exist in an underlying service of AOS-CX that could lead to an unauthenticated denial-of-service condition b CVE-2026-737737.5An unauthenticated Denial-of-Service (DoS) vulnerability exists in the API endpoint of AOS-CX. Successful exploitation of this vulnerability CVE-2026-737747.6A buffer overflow vulnerability exists in the underlying operating system of AOS-CX that could lead to unauthenticated disclosure of sensiti