Skip to content
COOEY

FAIL › dossier

aruba cx 6000 24g \(r8n87a\)

PRODUCT

· dossier confidence 0%

The HPE Aruba CX 6000 24G switch exhibits a critical security posture with multiple unpatched vulnerabilities in its AOS-CX operating system, including unauthenticated RCEs and management interface flaws. These vulnerabilities indicate systemic weaknesses that pose significant risk to defense-industrial-base networks.

Failure events
3
Zero-days
0
RCEs
1
On KEV
0
Critical
2
Worst shame
85
PROFILE
CategorynetworkingWhat they doHPE Aruba CX 6000 24G is a managed Ethernet switch running the AOS-CX operating system.
SECURITY POSTURE

Critical security posture due to multiple unpatched vulnerabilities in the AOS-CX operating system, including unauthenticated RCEs and management interface flaws.

Notable failures
  • CVE-2026-73749: unauthenticated RCE via malformed input on AOS-CX daemons
  • CVE-2026-73778: vulnerability in Credential Manager component
  • CVE-2026-23813: vulnerability in web-based management interface
Patterns: repeated unpatched edge-device RCEs; management interface flaws
FAILURE HISTORY · 3
DATEEVENTSEVSUMMARY
2026-09-01 CVE-2026-73749 critical An unauthenticated remote attacker can execute arbitrary code with elevated privileges on HPE AOS-CX daemons via malformed input.
2026-09-01 CVE-2026-73778 high CVE-2026-73778: A vulnerability exists in the Credential Manager component that may allow for un
2026-03-11 CVE-2026-23813 critical CVE-2026-23813: A vulnerability has been identified in the web-based management interface of AOS
DOSSIER SOURCES
Open questions: What is the current patch status for CVE-2026-73749 and CVE-2026-23813? · Are there any known exploits for these vulnerabilities in the wild?
DOSSIER · dex-RAG synthesis · grounded in our own collection + trusted sourcesbuilt 2026-10-09 04:37:39.567824+00:00