CVE-2026-73777: Authorization Bypass Vulnerabilities Leading to Privilege Escalation in AOS-CX API Endpoint
Published Sep 1, 2026
·Updated
Vulnerabilities have been identified in the API endpoint of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls.
Event History
Sep 1, 2026
CVE Published
via MITRE·08:28 PM
Data Sourced
via MITRE·08:28 PM
DescriptionSeverity
Frequently Asked Questions
1
Who is exposed to this issue?
AOS-CX switches with the affected API endpoint are the relevant systems. The issue is described as exploitable by a remote actor.
2
Does exploitation require valid credentials or user interaction?
No credentials or user interaction are required according to the vector. An unauthenticated remote actor could potentially bypass existing authentication controls.
3
How difficult is exploitation?
The attack complexity is rated High, indicating exploitation requires conditions beyond simply reaching the target over the network.