CVE-2026-73771: Improper Authentication Handling in AOS-CX Management Interface and API
An authentication vulnerability exists in the AOS-CX management interface and API that may allow improper authentication processing. An unauthenticated remote attacker could exploit this vulnerability under specific conditions to bypass authentication controls or exhaust system resources. Successful exploitation could result in unauthorized access or denial of service affecting the management interface.
Affected Software
Event History
Frequently Asked Questions
Who can attempt to exploit this issue?
An unauthenticated remote attacker can attempt exploitation against the AOS-CX management interface or API. The issue affects systems where those management services are reachable by the attacker.
What conditions are required for successful exploitation?
Exploitation requires specific conditions and user interaction, as reflected by the CVSS vector. No attacker privileges are required.
What could a successful attack do?
Successful exploitation may bypass authentication controls and provide unauthorized access to the management interface. It may also exhaust system resources, causing denial of service affecting that interface.