Skip to content
COOEY

FAIL › dossier

aruba cx 6410 v2 \(r0x27c\)

PRODUCT

· dossier confidence 0%

The HPE Aruba CX 6410 v2 (r0x27c) exhibits a critical security posture with multiple unpatched vulnerabilities in its AOS-CX operating system, including unauthenticated RCEs and management interface flaws. These vulnerabilities indicate systemic weaknesses that pose significant risk to defense-industrial-base networks.

Failure events
3
Zero-days
0
RCEs
1
On KEV
0
Critical
2
Worst shame
85
PROFILE
CategorynetworkingWhat they doHPE Aruba CX 6410 v2 (r0x27c) is a managed enterprise switch running the AOS-CX operating system.
SECURITY POSTURE

Critical security posture due to multiple unpatched vulnerabilities in the AOS-CX operating system, including unauthenticated RCEs and management interface flaws.

Notable failures
  • CVE-2026-73749: unauthenticated RCE via malformed input on AOS-CX daemons
  • CVE-2026-73778: Credential Manager component vulnerability
  • CVE-2026-23813: web-based management interface vulnerability
Patterns: repeated unpatched edge-device RCEs; management interface flaws; Credential Manager component vulnerabilities
FAILURE HISTORY · 3
DATEEVENTSEVSUMMARY
2026-09-01 CVE-2026-73749 critical An unauthenticated remote attacker can execute arbitrary code with elevated privileges on HPE AOS-CX daemons via malformed input.
2026-09-01 CVE-2026-73778 high CVE-2026-73778: A vulnerability exists in the Credential Manager component that may allow for un
2026-03-11 CVE-2026-23813 critical CVE-2026-23813: A vulnerability has been identified in the web-based management interface of AOS
DOSSIER SOURCES
Open questions: What is the exact release date of the AOS-CX operating system for the CX 6410 v2? · Are there any known mitigations for CVE-2026-73749 and CVE-2026-23813?
DOSSIER · dex-RAG synthesis · grounded in our own collection + trusted sourcesbuilt 2026-10-13 04:37:18.689951+00:00