A vulnerability in the web-based management interface of AOS-CX switches exposes some sessions to a lack of Cross-Site Request Forgery (CSRF) protection. This could allow a remote unauthenticated attacker to execute arbitrary input against the affected interface if the attacker can convince an authenticated user of the interface to interact with a specially crafted URL.
References
| Link | Resource |
|---|---|
| https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05134en_us&docLocale=en_US | Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
No history.
Information
Published : 2026-09-01 21:18
Updated : 2026-09-04 14:51
NVD link : CVE-2026-73780
Mitre link : CVE-2026-73780
CVE.ORG link : CVE-2026-73780
JSON object : View
Products Affected
hpe
- aruba_cx_6405_48sfp\+8sfp56_\(r0x30a\)
- aruba_cx_6410_\(r0x27a\)
- aruba_cx_6200f_24g_\(s0g13a\)
- aruba_cx_8325-48y8c_\(jl858a\)
- aruba_cx_6000_48g_\(r8n85a\)
- aruba_cx_6300m_24p_\(s0g05a\)
- aruba_cx_6000_24g_\(r8n88a\)
- aruba_cx_6300m_16p_\(s4p45a\)
- aruba_cx_6300m_24p_\(s4p44a\)
- aruba_cx_8360-24xf2c_\(jl711c\)
- aruba_cx_6000_24p_\(r8n88b\)
- aruba_cx_6000_48p_\(r9y03b\)
- aruba_cx_6200m_24g_\(r8v08a\)
- aruba_cx_6100_48g_\(r9y04a\)
- aruba_cx_6100_48g_\(jl676a\)
- aruba_cx_8360-32y4c_\(jl700c\)
- aruba_cx_6000_24p_\(r8n87b\)
- aruba_cx_6300m_48_\(jl663a\)
- aruba_cx_6300m_48p_\(s0g04a\)
- aruba_cx_6300m_48p_\(s4p47a\)
- aruba_cx_8320_32_\(jl579a\)
- aruba_cx_10000-48y6c_\(s0f98a\)
- aruba_cx_6100_48g_\(jl675a\)
- aruba_cx_6410_96g_\(jl741a\)
- aruba_cx_6000_8p_\(s4r22a\)
- aruba_cx_6000_48p_\(r8n85b\)
- aruba_cx_10040_32p_\(s4r54a\)
- aruba_cx_6000_24p_\(s4r27a\)
- aruba_cx_6200f_48g_\(jl726b\)
- aruba_cx_6000_8p_\(s4r29a\)
- aruba_cx_6300m_32p_\(s4p46a\)
- aruba_cx_6200f_12g_\(r8v13a\)
- aruba_cx_6300m_24p_\(s5z46a\)
- aruba_cx_8360-48xt4c_\(jl706c\)
- aruba_cx_6300m_24_\(jl658a\)
- aruba_cx_6000_24g_\(r8n87a\)
- aruba_cx_8325-48y8c_\(jl625a\)
- aruba_cx_6200f_24g_\(s0m81a\)
- aruba_cx_6000_48p_\(r8n86b\)
- aruba_cx_6300m_16p_\(s4p41a\)
- aruba_cx_6200m_24g_\(r8q67a\)
- aruba_cx_8325-48y8c_\(jl624a\)
- aruba_cx_6200f_24g_\(s0m82a\)
- aruba_cx_9300s_32p_\(s0f81a\)
- aruba_cx_6100_24g_\(jl677a\)
- aruba_cx_6200f_48g_\(s0g16a\)
- aruba_cx_6300m_48p_\(s0g02a\)
- aruba_cx_6300f_24_\(jl668a\)
- aruba_cx_6300m_48_\(jl762a\)
- aruba_cx_8360-48y6c_\(jl704c\)
- aruba_cx_6000_48g_\(r8n86a\)
- aruba_cx_6300m_48p_\(s4p43a\)
- aruba_cx_8325p-32c_\(s0g07a\)
- aruba_cx_6300m_48p_\(s0x44a\)
- aruba_cx_6300m_48_\(jl661a\)
- aruba_cx_6405_v2_\(r0x26c\)
- aruba_cx_6300m_48p_\(r8s90a\)
- aruba_cx_9300_\(r8z99a\)
- aruba_cx_9300_32d_\(r9a29a\)
- aruba_cx_6000_8p_\(s4r23a\)
- aruba_cx_6300m_24p_\(s0g01a\)
- aruba_cx_9300_32d_\(r8z96a\)
- aruba_cx_10040_\(s4r58a\)
- aruba_cx_6000_12p_\(s4r21a\)
- aruba_cx_6300f_24p_\(s0g98a\)
- aruba_cx_4100i_12-port_\(jl817a\)
- aruba_cx_4100i_24-port_\(jl818a\)
- aruba_cx_8360-48xt4c_\(jl707c\)
- aruba_cx_9300s_32p_\(s0f84a\)
- aruba_cx_6200f_48g_\(s0g15a\)
- aruba_cx_9300_\(r9a00a\)
- aruba_cx_6200f_48g_\(s0m85a\)
- aruba_cx_6200m_36g_\(r8q71a\)
- aruba_cx_6200m_48g_\(r8v11a\)
- aruba_cx_10000-48y6c_\(r8p13a\)
- aruba_cx_6300m_48p_\(s0g00a\)
- aruba_cx_8325h-18y4c_\(s4b23a\)
- aruba_cx_9300_\(r8z97a\)
- aruba_cx_6000_8p_\(s4r28a\)
- aruba_cx_6200f_24g_\(jl725b\)
- aruba_cx_6200f_48g_\(s0m84a\)
- aruba_cx_8360-32y4c_\(jl701c\)
- aruba_cx_9300_\(r8z98a\)
- aruba_cx_6200f_24g_\(jl724b\)
- aruba_cx_6000_48g_\(r9y03a\)
- aruba_cx_8400_\(jl376a\)
- aruba_cx_8360-12c_\(jl709c\)
- aruba_cx_6300f_48_\(jl665a\)
- aruba_cx_6200f_48g_\(jl727b\)
- aruba_cx_6100_12g_\(jl679a\)
- aruba_cx_6200f_24g_\(s0g14a\)
- aruba_cx_6000_24p_\(s4r26a\)
- aruba_cx_6300m_24_\(jl664a\)
- aruba_cx_6200m_48g_\(r8q69a\)
- aruba_cx_6300m_48_\(jl659a\)
- aruba_cx_6300f_24p_\(s0g96a\)
- aruba_cx_6200m_36g_\(r8v12a\)
- aruba_cx_8325p-32c_\(s0g08a\)
- aruba_cx_8400_8-slot_chassis_\(jl375a\)
- aruba_cx_6000_48p_\(s4r24a\)
- aruba_cx_8325h-16c_\(s4b24a\)
- aruba_cx_6200f_48g_\(jl728b\)
- aruba_cx_6000_12p_\(r8n89b\)
- aruba_cx_6300m_48p_\(s0g06a\)
- aruba_cx_6200f_48g_\(s0m90a\)
- aruba_cx_6300f_48p_\(s0g95a\)
- aruba_cx_8360-48y6c_\(jl705c\)
- aruba_cx_10000-48y6c_\(r8p14a\)
- aruba_cx_6100_24g_\(jl678a\)
- aruba_cx_10040_32p_\(s4r56a\)
- aruba_cx_6300m_32p_\(s4p42a\)
- aruba_cx_8325h-18y4c_\(s4b21a\)
- aruba_cx_8320_48_\(jl479a\)
- arubaos-cx
- aruba_cx_8360-16y2c_\(jl703c\)
- aruba_cx_6405_96g_\(r0x29a\)
- aruba_cx_6200f_48g_\(s0m83a\)
- aruba_cx_6200f_48g_\(s0m89a\)
- aruba_cx_10040_32p_\(s4r55a\)
- aruba_cx_6405_\(r0x26a\)
- aruba_cx_6300f_24_\(jl666a\)
- aruba_cx_6300m_24p_\(r8s89a\)
- aruba_cx_6300f_48p_\(s0g97a\)
- aruba_cx_6200f_48g_\(s0g17a\)
- aruba_cx_6300m_24p_\(s4p48a\)
- aruba_cx_6300m_24_\(jl660a\)
- aruba_cx_8360-24xf2c_\(jl710c\)
- aruba_cx_6300m_48sr5_\(r8s91a\)
- aruba_cx_6000_48p_\(s4r25a\)
- aruba_cx_9300_32d_\(r9a30a\)
- aruba_cx_6410_v2_\(r0x27c\)
- aruba_cx_6200f_24g_\(s0m87a\)
- aruba_cx_6200m_48g_\(r8q70a\)
- aruba_cx_6000_12g_\(r8n89a\)
- aruba_cx_8360-12c_\(jl708c\)
- aruba_cx_6200f_48g_\(s0m88a\)
- aruba_cx_6300m_24p_\(s0g03a\)
- aruba_cx_8325-32c_\(jl627a\)
- aruba_cx_6300m_24p_\(r8s92a\)
- aruba_cx_6200m_24g_\(r8q68a\)
- aruba_cx_9300s_32p_\(s0f87a\)
- aruba_cx_8325-32c_\(jl626a\)
- aruba_cx_6300m_24_\(jl662a\)
- aruba_cx_8360-16y2c_\(jl702c\)
- aruba_cx_6200m_48g_\(r8v10a\)
- aruba_cx_6200f_24g_\(s0m86a\)
- aruba_cx_9300s_32p_\(s0f83a\)
- aruba_cx_8325h-16c_\(s4b22a\)
- aruba_cx_6300m_24p_\(s0f99a\)
- aruba_cx_6300f_48_\(jl667a\)
- aruba_cx_8320_48_\(jl581a\)
- aruba_cx_6000_48p_\(s4r20a\)
- aruba_cx_9300s_32p_\(s0f82a\)
- aruba_cx_6200f_12g_\(r8q72a\)
- aruba_cx_9300s_32p_\(s0f88a\)
- aruba_cx_6200m_24g_\(r8v09a\)
CWE
CWE-352
Cross-Site Request Forgery (CSRF)