HPE Patches Critical RCE Vulnerabilities in AOS-CX
Summary
HPE has released updates to address critical remote code execution (RCE) vulnerabilities in its AOS-CX operating system. These vulnerabilities, collectively tracked under CVE-2026-73749, carry a high CVSS score of 9.8, indicating a significant security risk.
IFF Assessment
FOE
The discovery and patching of critical RCE vulnerabilities represent a significant threat to organizations using HPE's AOS-CX, as exploitation could lead to unauthorized system control.
Severity
9.8
Critical
Defender Context
Defenders should prioritize patching HPE devices running AOS-CX to mitigate the risk of exploitation. This incident highlights the ongoing importance of timely vulnerability management for network infrastructure devices, as critical flaws can have far-reaching consequences.