SEPTEMBER 18, 2026
Live Feed
Back to database
Case File

CVE-2026-73765

HIGH · CVSS 7.2 EPSS 0.65% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-09-01 · Last synced 2026-09-18

CyberRota Analysis

AI-Generated

Authenticated path traversal vulnerabilities in the API endpoints of AOS-CX allow attackers to write arbitrary files to the underlying operating system, potentially leading to remote code execution. Organizations utilizing AOS-CX should prioritize addressing this vulnerability due to its high severity and the significant risk it poses to system integrity and security. Immediate remediation is essential to prevent potential exploitation.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
exploit remote code execution code execution

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-73765
Severity
HIGH
CVSS
7.2
EPSS
0.65%

Original NVD Description

Authenticated path traversal vulnerabilities exist in API endpoints of AOS-CX. Successful exploitation of these vulnerabilities allows an attacker to write arbitrary files to the underlying operating system, which could lead to remote code execution.

Related CVEs

Other vulnerabilities affecting the same vendor(s)