boxscore/security
CVE · referencelatest edition

Reference page — cumulative record through Sunday, October 4, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.

CVE-2026-73763

Hewlett Packard Enterprise (HPE) AOS-CX — Unauthenticated Remote Command Execution in Management Component
  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   A   L   N   N  U  H  H  H    8.8   .0047   38.9     —
AFFECTED
  Product  Versions      Fixed
  AOS-CX   10.18.0000 –  —
TIMELINE
  Aug 13  Reserved by hpe
  Sep 1   Published (CNA: hpe)
  Sep 10  RESCORED — CVE-2026-73763 (Hewlett Packard Enterprise (HPE) AOS-CX). CVSS 7.1 → 8.8 (NVD).
CWE-77 · CNA: hpe · CVSS v3.1 · 1 reference · NVD status: Analyzed

Description

A vulnerability exists in a management component that could allow an unauthenticated adjacent attacker to execute arbitrary commands. Successful exploitation could result in remote execution of arbitrary commands in the context of the affected utility.

Lifecycle

Complete event history — 3 events, chronological
DateEventDetail
August 13, 2026ReservedReserved by hpe
September 1, 2026PublishedPublished (CNA: hpe)
September 10, 2026RESCOREDRESCORED — CVE-2026-73763 (Hewlett Packard Enterprise (HPE) AOS-CX). CVSS 7.1 → 8.8 (NVD).

Affected

Affected products and packages — 1 row
VendorProduct / PackageEcosystemVersion introducedFixed
Hewlett Packard Enterprise (HPE)AOS-CX—10.18.0000—

Weaknesses

CWE-77

References (1)

Related

Authoritative record: CVE-2026-73763 at cve.org

Vendors: hewlett packard enterprise (hpe)

Weaknesses: CWE-77

About this page

This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2026-73763 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Sunday, October 4, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.