Memory Corruption Vulnerability in AOS-S by HPE
CVE-2026-76745

9.6CRITICAL

Key Information:

Vendor

HP (HP)

Status
Aos-switch (aos-s)
Vendor
CVE Published:
6 October 2026

What is CVE-2026-76745?

A memory corruption vulnerability has been identified in AOS-S, posing a significant risk that can be exploited by an unauthenticated adjacent attacker. This issue allows for the potential execution of arbitrary code, which could lead to unauthorized access and compromise of sensitive data. It is crucial for organizations using AOS-S to implement recommended security measures and updates to mitigate this vulnerability.

Affected Version(s)

AOS-Switch (AOS-S) 16.11.0000 <= 16.11.0031

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpe...

CVSS V3.1

Score:
9.6
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Internal security research (HPE Networking).
.