Hewlett Packard Enterprise (HPE) has patched a critical vulnerability in the ArubaOS-CX network operating system that could lead to remote code execution.
Tracked as CVE-2026-73749, the security issue is a buffer overflow that allows unauthenticated remote attackers to send specially crafted packets to an affected daemon process, achieving code execution with elevated privileges.
“Multiple vulnerabilities exist in a daemon of ArubaOS-CX that may allow for improper processing of malformed input,” reads HPE’s bulletin.
“An unauthenticated remote attacker could exploit these vulnerabilities by sending specially crafted packets to the affected service.”
Affected release branches and fixes listed in the bulletin are:
HPE noted that the AOS-CX 10.10.1181 version has reached End of Maintenance (EOM) and only receives fixes for internally discovered, critical issues, a condition that also applies to CVE-2026-73749.
ArubaOS-CX is HPE Aruba Networking’s operating system for its enterprise-grade network switches, typically used by large businesses, government agencies, universities, healthcare organizations, data centers, and service providers.
HPE’s security bulletin also covers a set of 23 other security vulnerabilities, some with high severity ratings, between 8.1 and 8.8:
The vendor “strongly encourages” customers to upgrade to one of the fixed releases listed in the bulletin.
HPE mentions that, at the time of the bulletin’s publication, it was not aware of active exploitation or publicly available proof-of-concept exploits targeting the listed flaws.
Overall prevention scores can hide what happens after initial access. Once attackers are using valid credentials, prevention drops sharply.
The Blue Report 2026 measures defenses technique by technique across 338 million simulations run in customer production environments.
Critical Elementor Pro flaw exploited to take over WordPress sites
Hackers exploit Sangoma Switchvox flaw to deploy reverse shells
WordPress backup plugin flaw exposes millions of sites to takeover attacks
Critical Langflow flaw exploited to steal OpenAI and AWS keys
Gogs patches critical zero-day enabling remote code execution
Nearly 22,000 Microsoft Exchange servers vulnerable to hijack attacks
Recently patched PaperCut zero-days used in data theft attacks
Dropbox accounts breached through Lenovo email verification flaw
Can you trust every session? See how session enrichment enables better authentication decisions.
AI-driven vulnerability discovery is accelerating. See how Action1 helps remediation keep pace.
Unify ransomware protection and recovery for every client
Identity, Data Governance & Threat Detection in One Platform: Take our In-Browser Tour
Terms of Use – Privacy Policy – Ethics Statement – Affiliate Disclosure
Read our posting guidelinese to learn what content is prohibited.
