CVE-2026-73775: Authenticated Sensitive Information Disclosure Vulnerabilities in AOS-CX
Vulnerabilities in the API endpoint of AOS-CX could allow a remote attacker authenticated with low privileges to access sensitive information. A successful exploit allows an attacker to retrieve information which could be used to potentially gain further access to network services supported by AOS-CX.
Affected Software
Event History
Frequently Asked Questions
What access does an attacker need to exploit this issue?
The attacker must be able to authenticate remotely to the AOS-CX API endpoint with a low-privileged account. No user interaction is required.
What is the likely impact of successful exploitation?
An attacker could retrieve sensitive information from the affected API endpoint. That information could potentially be used to obtain further access to network services supported by AOS-CX.
Is this limited to confidentiality impact?
The provided severity vector indicates high confidentiality impact, with no direct integrity or availability impact stated. The scope is marked as changed.