CVE-2026-63454EPSS p57.5%

CVE-2026-63454CVE-2026-63454

hpe / arubaos-cx

Description

An authenticated path traversal vulnerability exists in AOS-CX. Successful exploitation of this vulnerability allows an attacker to copy arbitrary files to a user readable location from the command line interface of the underlying operating system, which could lead to remote code execution.

Scoring

CVSS 7.2 ()
VectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS0.87% probability of exploitation · percentile 57.5% · 2026-10-06T12:00:23Z
Last modified2026-08-11
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.