CVE-2026-73783

MediumCVSS 4.9/10Last modified Oct 5, 2026

Description

Stack overflow vulnerabilities exist in an API endpoint of AOS-CX. Successful exploitation could allow an authenticated malicious actor to cause a denial-of-service condition on the affected system.

Metrics

CVSS 3.1 4.9/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-121

Affected software

Vendor	Product	Versions
Hewlett Packard Enterprise (HPE)	AOS-CX	>= 10.18.0000, <= 10.18.0001; >= 10.17.0000, <= 10.17.1021; >= 10.16.0000, <= 10.16.1051; >= 10.13.0000, <= 10.13.1180; >= 10.10.0000, <= 10.10.1180

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05134en_us&docLocale=en_USPatch, Vendor Advisory

Timeline

Published: Sep 1, 2026
Last modified: Oct 5, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-737848.8A potential security vulnerability in HPE IceWall products could be exploited to tamper SAML response, allowing an attacker to impersonate a CVE-2026-737857.5A potential security vulnerability in HPE IceWall Federation Agent and Proxy could allow a remote unauthenticated attacker to cause a denial CVE-2026-737867.5A vulnerability in the web-based management interface of CPPM could allow an unauthenticated remote attacker to conduct a Denial-of-Service CVE-2026-737877.2A vulnerability in the CPPM web interface could allow an authenticated remote attacker to access directory information on a vulnerable syste CVE-2026-737886.5A vulnerability in the ClearPass OnGuard agent could allow an authenticated remote attacker to elevate their own privileges on a vulnerable CVE-2026-737895.3A vulnerability in the web-based management interface of CPPM guest account management services could allow an unauthenticated remote attack CVE-2026-73797.5Memory leak in sharkd 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service CVE-2026-737908.2A vulnerability in HPE NonStop iTP WebServer can cause memory corruption and system shutdown.CVE-2026-737912.0A security vulnerability in HPE NonStop Hpjmeter can cause stack and heap buffer overflow.CVE-2026-737923.8A security vulnerability in HPE NonStop Java JToolkit can allow command Injection and buffer overflow.CVE-2026-737937.9HPE NonStop Middleware software has secret key handling and data deserialization vulnerability.CVE-2026-737944.6HPE NonStop MODULAR NSJ contains a predictable seed vulnerability in Random Number Generation (PRNG)