FAIL › dossier
aruba cx 9300 32d \(r9a29a\)
PRODUCT· dossier confidence 40%
HPE Aruba Networking exhibits a critical security posture with multiple unpatched vulnerabilities in its AOS-CX operating system, including unauthenticated RCEs and management interface flaws. These vulnerabilities indicate systemic weaknesses that pose significant risk to defense-industrial-base networks.
PROFILE
CategorynetworkingWhat they doHPE Aruba Networking provides cloud networking, security, and infrastructure solutions including switches, SD-WAN, and fabric management.HQPalo Alto, California
Websitehttps://www.arubanetworking.com ↗
SECURITY POSTURE
Critical security posture due to multiple unpatched vulnerabilities in the AOS-CX operating system, including unauthenticated RCEs and management interface flaws.
Notable failures
- CVE-2026-73749: unauthenticated RCE via malformed input on AOS-CX daemons
- CVE-2026-73778: Credential Manager component vulnerability
- CVE-2026-23813: web-based management interface vulnerability
Patterns: repeated unpatched edge-device RCEs; systemic weaknesses in AOS-CX operating system; management interface flaws
FAILURE HISTORY · 3
| DATE | EVENT | SEV | SUMMARY |
|---|---|---|---|
| 2026-09-01 | CVE-2026-73749 | critical | An unauthenticated remote attacker can execute arbitrary code with elevated privileges on HPE AOS-CX daemons via malformed input. |
| 2026-09-01 | CVE-2026-73778 | high | CVE-2026-73778: A vulnerability exists in the Credential Manager component that may allow for un |
| 2026-03-11 | CVE-2026-23813 | critical | CVE-2026-23813: A vulnerability has been identified in the web-based management interface of AOS |
DOSSIER SOURCES
- Netflix - Overview - Profile · ir.netflix.net
- MCA Company Lookup, Directors & Public Filings — Free Search · inspex.in
- GitHub - api-evangelist/aruba: Aruba — independent third-party profile ... · github.com
- DVIDS - Digital Visual Information Distribution System · www.dvidshub.net
- Aruba End-of-Life Dates | eol.network · eol.network
- ArubaOS-CX-Releases, Versionen und Termine für das End-of-Life (EOL) · www.versio.io
- Aruba Stack Switches Buyer's Guide: VSF vs Backplane · electronics.alibaba.com
Open questions: What is the exact release date of the AOS-CX operating system for the CX 9300 32D? · What is the current patch status for CVE-2026-73749 and CVE-2026-23813?
DOSSIER · dex-RAG synthesis · grounded in our own collection + trusted sourcesbuilt 2026-09-25 04:31:18.030087+00:00