THE page discusses critical vulnerabilities identified in HPE Networking's AOS-CX switch software. Key points include:
1. **Alert Summary**: 7 active exploits were detected today, including several critical vulnerabilities like CVE-2026-73749 (CVSS 9.8) which allows unauthenticated remote code execution.
2. **Vulnerability Overview**: A total of 6 CVEs were reviewed, with 1 classified as critical and 5 as high. All reported vulnerabilities are currently not confirmed to be actively exploited.
3. **Details on CVEs**: Notable vulnerabilities highlighted include a set of buffer overflow bugs that can be triggered by sending specially crafted packets, leading to elevated code execution privileges.
4. **Patching Information**: Users are advised to update to fixed versions of AOS-CX (10.18.1002, 10.17.1030, etc.) to mitigate these vulnerabilities.
5. **Mitigation Recommendations**: If immediate patching isn't possible, restricting access to management interfaces and applying firewall rules can help reduce exposure.
6. **Affected Versions**: Multiple versions of AOS-CX are impacted, particularly those below certain builds outlined in the advisory.
7. **Overall Importance**: Exploits in switch software pose a significant risk to network integrity, emphasizing the need for prompt action.