CVE-2026-73755: Privilege Escalation via Unauthorized Access to Sensitive Session Information
Published Sep 1, 2026
·Updated
A privilege escalation vulnerability exists in the API endpoint of AOS-CX. Successful exploitation could allow an authenticated low-privilege operator user, after a required user action, to access sensitive information from the vulnerable system.
Affected Software
1 affected component
AOS-CX
Event History
Sep 1, 2026
CVE Published
via MITRE·08:28 PM
Data Sourced
via MITRE·08:28 PM
DescriptionSeverity
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
An attacker needs an authenticated low-privilege operator account. Exploitation also requires a user action.
2
What is the impact if exploitation succeeds?
A successful attack can expose sensitive information from the affected system. The provided information does not indicate integrity or availability impact.