CVE-2026-73777 Hewlett Packard Enterprise (HPE) CVE debrief

Who should care

Security teams and administrators responsible for HPE Aruba CX switches should be aware of this vulnerability and take immediate action to verify inventory, check for compensating controls, and plan for vendor remediation.

Technical summary

CVE-2026-73777 is a high-severity vulnerability in HPE Aruba CX switches that allows an unauthenticated remote actor to bypass existing authentication controls on the API endpoint. The vulnerability has a CVSS score of 8.1 and is classified as CWE-287. Affected versions include 10.10.1180, 10.13.0000, 10.16.0000, 10.17.0000, and 10.18.0001. Non-vulnerable versions and specific hardware models are also listed in the source data.

Defensive priority

HPE Aruba CX switches API endpoint authentication control bypass vulnerability CVE-2026-73777 requires immediate attention; verify inventory, check for compensating controls, and apply vendor remediation.

Recommended defensive actions

• Verify inventory of HPE Aruba CX switches for exposure
• Check for compensating controls such as network segmentation and access controls
• Monitor for suspicious activity on API endpoints
• Apply vendor remediation when available

Evidence notes

The CVE description indicates vulnerabilities in the API endpoint of AOS-CX switches that could allow an unauthenticated remote actor to bypass authentication controls. Limited information is available on affected scope and vendor remediation status.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.