CVE-2026-73757: Authenticated Server-Side Request Forgery (SSRF) Leading to Information Disclosure in AOS-CX
A vulnerability in the web-based management interface of AOS-CX could allow an authenticated remote attacker to conduct a server-side request forgery (SSRF) attack. A successful exploit allows an attacker to enumerate information about the internal structure of the AOS-CX host, leading to potential disclosure and limited modification of sensitive information.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
An attacker must be authenticated to the AOS-CX web-based management interface and able to reach it remotely. The supplied vector indicates low privileges are required and no user interaction is needed.
What is the likely impact of successful exploitation?
Successful SSRF can enumerate information about the AOS-CX host’s internal structure, potentially disclosing sensitive information and allowing limited modification of sensitive information. The provided impact metrics indicate low confidentiality and integrity impact, with no availability impact.