FAIL › dossier
aruba cx 8360-16y2c \(jl703c\)
PRODUCT· dossier confidence 80%
The HPE Aruba CX 8360-16Y2C switch exhibits a critical security posture due to multiple unpatched vulnerabilities in its AOS-CX operating system, including unauthenticated RCEs and management interface flaws. These systemic weaknesses pose significant risk to defense-industrial-base networks and require immediate patching and network segmentation.
PROFILE
CategorynetworkingWhat they doHPE Aruba CX 8360-16Y2C is a high-speed Ethernet switch running the AOS-CX operating system.
SECURITY POSTURE
Critical security posture due to multiple unpatched vulnerabilities in the AOS-CX operating system, including unauthenticated RCEs and management interface flaws.
Notable failures
- CVE-2026-73749: unauthenticated RCE in AOS-CX daemons
- CVE-2026-73778: Credential Manager vulnerability
- CVE-2026-23813: web-based management interface vulnerability
Patterns: repeated unpatched edge-device RCEs; systemic weaknesses in AOS-CX operating system
FAILURE HISTORY · 3
| DATE | EVENT | SEV | SUMMARY |
|---|---|---|---|
| 2026-09-01 | CVE-2026-73749 | critical | An unauthenticated remote attacker can execute arbitrary code with elevated privileges on HPE AOS-CX daemons via malformed input. |
| 2026-09-01 | CVE-2026-73778 | high | CVE-2026-73778: A vulnerability exists in the Credential Manager component that may allow for un |
| 2026-03-11 | CVE-2026-23813 | critical | CVE-2026-23813: A vulnerability has been identified in the web-based management interface of AOS |
DOSSIER SOURCES
- Bridge returned error 0! (20735) · 127.0.0.1
- Bridge returned error 0! (20735) · 127.0.0.1
- Bridge returned error 0! (20735) · 127.0.0.1
Open questions: HPE Aruba corporate headquarters location · HPE Aruba founding year · HPE Aruba corporate website URL · HPE Aruba corporate size (employee count)
DOSSIER · dex-RAG synthesis · grounded in our own collection + trusted sourcesbuilt 2026-10-09 04:33:00.302426+00:00