Skip to content
COOEY

FAIL › dossier

aruba cx 8360-16y2c \(jl702c\)

PRODUCT

· dossier confidence 0%

HPE Aruba CX 8360-16Y2C is a high-speed Ethernet switch with a critical security track record. The AOS-CX operating system has suffered multiple critical and high-severity unpatched vulnerabilities, including unauthenticated RCEs and management interface flaws, indicating systemic weaknesses.

Failure events
3
Zero-days
0
RCEs
1
On KEV
0
Critical
2
Worst shame
85
PROFILE
CategorynetworkingWhat they doHPE Aruba CX 8360-16Y2C is a manageable 25/100 Gigabit Ethernet switch running the AOS-CX operating system.
SECURITY POSTURE

The product exhibits a critical security posture due to multiple unpatched vulnerabilities in its AOS-CX operating system, including unauthenticated RCEs and management interface flaws.

Notable failures
  • CVE-2026-73749: unauthenticated RCE in AOS-CX daemons
  • CVE-2026-73778: Credential Manager vulnerability
  • CVE-2026-23813: web-based management interface vulnerability
Patterns: repeated unpatched edge-device RCEs; systemic weaknesses in AOS-CX operating system; unauthenticated remote code execution in core daemons
FAILURE HISTORY · 3
DATEEVENTSEVSUMMARY
2026-09-01 CVE-2026-73749 critical An unauthenticated remote attacker can execute arbitrary code with elevated privileges on HPE AOS-CX daemons via malformed input.
2026-09-01 CVE-2026-73778 high CVE-2026-73778: A vulnerability exists in the Credential Manager component that may allow for un
2026-03-11 CVE-2026-23813 critical CVE-2026-23813: A vulnerability has been identified in the web-based management interface of AOS
DOSSIER SOURCES
Open questions: HPE Aruba corporate founding date · HPE Aruba headquarters location · HPE Aruba corporate size · HPE Aruba ownership structure · HPE Aruba corporate website
DOSSIER · dex-RAG synthesis · grounded in our own collection + trusted sourcesbuilt 2026-09-24 05:11:27.339188+00:00