CVE-2026-73764: Authentication Bypass Vulnerabilities Leading to Unauthorized Modification and Service Disruption in AOS-CX
Published Sep 1, 2026
·Updated
Vulnerabilities have been identified in the operating system of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. In some cases this could enable unauthorized modification of affected resources and limited disruption of affected services.
Affected Software
1 affected component
AOS-CX switches
Event History
Sep 1, 2026
CVE Published
via MITRE·08:28 PM
Data Sourced
via MITRE·08:28 PM
DescriptionSeverity
Frequently Asked Questions
1
What level of access does an attacker need to exploit these vulnerabilities?
An attacker can be unauthenticated and remote. No prior privileges or user interaction are required according to the supplied severity vector.
2
What impact could exploitation have on an affected switch?
Exploitation could allow unauthorized modification of affected resources and limited disruption of affected services. The supplied vector indicates integrity impact is high and availability impact is low, with no stated confidentiality impact.