CVE-2026-73776: Authenticated Signature Verification Bypass Leading to Arbitrary Code Execution in AOS-CX
A signature verification bypass vulnerability exists in the command line interface of AOS-CX. Successful exploitation could allow an authenticated malicious actor with administrative privileges to execute arbitrary code on the underlying operating system, when certain pre-conditions outside of the attacker’s control are met.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
Exploitation requires an authenticated malicious actor with administrative privileges on the AOS-CX command line interface. It is therefore primarily relevant where administrative access has been granted to untrusted or compromised users.
What additional conditions are required for exploitation?
Certain pre-conditions outside the attacker’s control must be met. The available information does not identify those conditions, so administrators should consult the vendor advisory to determine whether their environment meets them.
What is the potential impact if exploitation succeeds?
A successful attacker could bypass signature verification and execute arbitrary code on the underlying operating system. The published vector indicates high confidentiality and integrity impact, with no stated availability impact.