What’s Vulnerable › Vulnerabilities
CVE-2026-76743: Authentication Bypass Vulnerability in the Management Interface of AOS-S
- Severity: critical (CVSS 9.8 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.5% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-10-06 · updated 2026-10-08
- Weakness: CWE-287
Description
A vulnerability have been identified in the management interface of AOS-S that could potentially allow an unauthenticated remote attacker to circumvent existing authentication controls if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacker to gain unauthorized access to the affected system.
Affected products
- Hewlett Packard Enterprise (HPE) AOS-Switch (AOS-S): from 16.11.0000 through 16.11.0031
References
Get alerted when CVE-2026-76743 or the next vulnerability affects your stack