CVE-2026-73779: Authentication Bypass Vulnerabilities Leading to Information Disclosure, Unauthorized Modification, and Service Disruption in AOS-CX
Vulnerabilities have been identified in the operating system of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. Successful exploitation could compromise system integrity and further expose sensitive information.
Affected Software
Event History
Frequently Asked Questions
Who could exploit this issue?
An unauthenticated remote actor could potentially exploit the affected authentication controls on Aruba AOS-CX switches. The vector is adjacent network access, so the attacker would need network proximity rather than Internet access alone.
What could a successful attacker do?
Successful exploitation could bypass existing authentication controls, compromise system integrity, expose sensitive information, make unauthorized modifications, and disrupt service availability.
Are default configurations known to be affected?
The available information does not state whether default configurations are affected or identify any configuration prerequisites beyond the presence of the vulnerable authentication controls.
How can I determine whether a switch is affected?
The available information identifies Aruba AOS-CX switches as affected but does not provide affected software versions, fixed versions, or detection steps. Consult the referenced vendor advisory for version-specific applicability and remediation guidance.