Unauthenticated Buffer Overflow Vulnerability in HPE AOS-S
CVE-2026-76746

9.3CRITICAL

Key Information:

Vendor

HP (HP)

Status
Aos-switch (aos-s)
Vendor
CVE Published:
6 October 2026

What is CVE-2026-76746?

A buffer overflow vulnerability has been identified in HPE AOS-S, which can be exploited by an unauthenticated adjacent attacker. Successful exploitation may lead to exposure of sensitive memory contents, potentially compromising the integrity and confidentiality of stored information. Furthermore, it could result in a denial of service, disrupting normal operations of the affected device. Organizations using HPE AOS-S should consider implementing appropriate security measures and updates to mitigate this risk.

Affected Version(s)

AOS-Switch (AOS-S) 16.11.0000 <= 16.11.0031

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpe...

CVSS V3.1

Score:
9.3
Severity:
CRITICAL
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Internal security research (HPE Networking).
.