Find notable cyber news and cases, enriched with sources, timelines, and signals.
Home Watchlists Beta Browse News Feed Stats About Contact

HPE ArubaOS-CX security bulletin (CVE-2026-73749)

Security Patch Release
First reported
Last updated
Happening score
H score 31
1 unique sources, 1 articles

Summary

Hide ▲

HPE released a security bulletin for ArubaOS-CX that patches CVE-2026-73749, a buffer overflow that could let unauthenticated remote attackers reach remote code execution on affected switches. The bulletin lists fixed releases for 10.18.0001, 10.17.1021 and earlier, 10.16.1051 and earlier, 10.13.1180 and earlier, and 10.10.1180 and earlier. HPE also flagged 10.10.1181 as End of Maintenance, limiting its fix support for this critical issue.

Related Happenings

NLnet Labs security patch release for CVE-2026-81642

Security Patch Release
H score39 First: 17.09.2026 15:30 Last: 17.09.2026 15:30 Sources 1

About this happening: NLnet Labs released Unbound 1.26.1 to close nine security flaws, including CVE-2026-81642 in the DNSSEC validator. The update addresses a critical heap overf...

Open Happening

GitLab CE/EE security update for CVE-2026-85706

Security Patch Release
H score44 First: 14.09.2026 10:06 Last: 14.09.2026 10:06 Sources 1

About this happening: GitLab released CE/EE fixes for CVE-2026-85706, and users were urged to patch immediately to close a repository commits API flaw that can expose credentials and se...

Open Happening

GitLab CE/EE security patch release (CVE-2023-2825, CVE-2026-87719)

Security Patch Release
H score45 First: 11.09.2026 14:15 Last: 11.09.2026 14:15 Sources 1

About this happening: GitLab released fixes for CVE-2023-2825 and CVE-2026-87719 in GitLab Community Edition (CE) and Enterprise Edition (EE), requiring self-managed installations...

Open Happening

Check Point VPN certificate security patch release (CVE-2026-85102, CVE-2026-85103)

Security Patch Release
H score53 First: 10.09.2026 14:45 Last: 10.09.2026 14:45 Sources 1

About this happening: Check Point began delivering fixes on September 9 for CVE-2026-85102 and CVE-2026-85103, two critical VPN certificate flaws in Security Gateways and Secu...

Latest development: 12.09.2026 17:14

The Dutch Nationaal Cyber Security Centrum (NCSC) warned that exploitation of CVE-2026-85102 and CVE-2026-85103 in Check Point VPN is expected soon, urged administrators to install the security updates, and advised Site-to-Site VPN users to restrict access to trusted IP addresses. The NCSC also said Check Point LivePatch users should have received protections for the flaws since September 9.

Open Happening

Adobe security patch release for CVE-2026-48362

Security Patch Release
H score43 First: 11.08.2026 19:50 Last: 11.08.2026 19:50 Sources 1

About this happening: Adobe shipped a priority 1 update for ColdFusion that fixes 15 security defects, including flaws that could enable arbitrary code execution and application D...

Open Happening

Timeline

  1. 03.09.2026 21:28 2 articles · 13d ago

    HPE patches critical ArubaOS-CX remote code execution flaw

    Mitigation Patch Update

    Hewlett Packard Enterprise patched CVE-2026-73749 in ArubaOS-CX, a critical buffer overflow in a daemon that could let unauthenticated remote attackers send specially crafted packets and achieve code execution with elevated privileges. HPE listed fixed releases for 10.18.0001, 10.17.1021 and earlier, 10.16.1051 and earlier, 10.13.1180 and earlier, and 10.10.1180 and earlier, and said 10.10.1181 is End of Maintenance with fixes only for internally discovered, critical issues. HPE also said it was not aware of active exploitation or publicly available proof-of-concept exploits at publication time.

    Show sources
    Open in new tab