CVE-2026-73760: Authenticated Path Traversal Vulnerability Leads to Remote Unauthorized Access to Files in AOS-CX
Published Sep 1, 2026
·Updated
An authenticated Path Traversal vulnerability exists in AOS-CX. Successful exploitation of this vulnerability allows an attacker to read arbitrary files from the web-based management interface of the underlying operating system, which could lead to remote unauthorized access to files.
Affected Software
1 affected component
AOS-CX
Event History
Sep 1, 2026
CVE Published
via MITRE·08:28 PM
Data Sourced
via MITRE·08:28 PM
DescriptionSeverity
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
The attacker needs low-level authenticated privileges. No user interaction is required.
2
Can this be exploited remotely?
Yes. The attack vector is network-based and targets the web-based management interface.
3
Does exploitation allow an attacker to alter files or disrupt the device?
The available impact information indicates high confidentiality impact, with no integrity or availability impact. The documented outcome is unauthorized reading of arbitrary files.