Перейти к содержимому
CodeAuditAgent

CVE-2026-73757

A vulnerability in the web-based management interface of AOS-CX could allow an authenticated remote attacker to conduct a server-side request forgery (SSRF) attack. A successful exploit allows an attacker to enumerate information about the internal structure of the AOS-CX host, leading to potential disclosure and limited modification of sensitive information.

СреднийCWE-918 Все CVE

Слабость

A vulnerability in the web-based management interface of AOS-CX could allow an authenticated remote attacker to conduct a server-side request forgery (SSRF) attack. A successful exploit allows an attacker to enumerate information about the internal structure of the AOS-CX host, leading to potential disclosure and limited modification of sensitive information.

Затронутые продукты

  • hpe arubaos-cx
  • hpe aruba_cx_10000-48y6c_\(r8p13a\)
  • hpe aruba_cx_10000-48y6c_\(r8p14a\)
  • hpe aruba_cx_10000-48y6c_\(s0f98a\)
  • hpe aruba_cx_10040_\(s4r58a\)
  • hpe aruba_cx_10040_32p_\(s4r54a\)
  • hpe aruba_cx_10040_32p_\(s4r55a\)
  • hpe aruba_cx_10040_32p_\(s4r56a\)

Источники

Найдите уязвимость раньше атакующего.

Войдите через GitHub и запустите первый аудит меньше чем за минуту. Для бесплатного тарифа банковская карта не нужна.