CVE-2026-73772

MediumCVSS 6.5/10Last modified Sep 4, 2026

Description

Buffer overflow vulnerabilities exist in an underlying service of AOS-CX that could lead to an unauthenticated denial-of-service condition by sending specially crafted packets to the affected device. Successful exploitation of these vulnerabilities results in a disruption of normal operation of the underlying operating system.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-120

Affected software

No affected versions have been published.

Timeline

Published: Sep 1, 2026
Last modified: Sep 4, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-737737.5An unauthenticated Denial-of-Service (DoS) vulnerability exists in the API endpoint of AOS-CX. Successful exploitation of this vulnerability CVE-2026-737747.6A buffer overflow vulnerability exists in the underlying operating system of AOS-CX that could lead to unauthenticated disclosure of sensiti CVE-2026-737757.7Vulnerabilities in the API endpoint of AOS-CX could allow a remote attacker authenticated with low privileges to access sensitive informatio CVE-2026-737767.9A signature verification bypass vulnerability exists in the command line interface of AOS-CX. Successful exploitation could allow an authent CVE-2026-737778.1Vulnerabilities have been identified in the API endpoint of AOS-CX switches that could potentially allow an unauthenticated remote actor to CVE-2026-737789.8A vulnerability exists in the Credential Manager component that may allow for unauthorized administrative access. An unauthenticated remote CVE-2026-737798.2Vulnerabilities have been identified in the operating system of AOS-CX switches that could potentially allow an unauthenticated remote actor CVE-2026-73787.5Crash in sharkd 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service CVE-2026-737808.3A vulnerability in the web-based management interface of AOS-CX switches exposes some sessions to a lack of Cross-Site Request Forgery (CSRF CVE-2026-737818.4A vulnerability in the web-based management interface of AOS-CX could allow an authenticated remote attacker to conduct a stored cross-site CVE-2026-737828.8A format string vulnerability exists in the command line interface of AOS-CX that could lead to unauthenticated remote code execution. Succe CVE-2026-737834.9Stack overflow vulnerabilities exist in an API endpoint of AOS-CX. Successful exploitation could allow an authenticated malicious actor to c