CVE Intelligence

Hewlett Packard Enterprise (HPE) AOS-Switch (AOS-S) vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Hewlett Packard Enterprise (HPE) AOS-Switch (AOS-S): 9 record(s), with affected versions and fixes.

CVE-2026-76749 Medium · 6.5 CWE-200 Oct 6, 2026
Unauthenticated Sensitive Information Disclosure in AOS-S
A sensitive information disclosure vulnerability exists in AOS-S. Successful exploitation could allow an unauthenticated remote attacker to access sensitive information.
CVE-2026-76748 High · 8.8 CWE-269 Oct 6, 2026
Authenticated Privilege Escalation Vulnerability in the API of AOS-S
A privilege escalation vulnerability exists in the API of AOS-S. Successful exploitation could allow an authenticated read-only user to escalate their privileges and gain administrative access to the affected system.
CVE-2026-76747 Critical · 9.1 CWE-120 Oct 6, 2026
Unauthenticated Buffer Overflow Vulnerabilities lead to Information Disclosure in AOS-S
Buffer overflow vulnerabilities exist in the affected interface of AOS-S. Successful exploitation could allow an unauthenticated remote attacker to expose sensitive memory contents and cause a denial of service on the device.
CVE-2026-76746 Critical · 9.3 CWE-120 Oct 6, 2026
Unauthenticated Adjacent Buffer Overflow Vulnerability Leading to Information Disclosure in AOS-S
An unauthenticated buffer overflow vulnerability exists in AOS-S. Successful exploitation could allow an unauthenticated adjacent attacker to expose sensitive memory contents and cause a denial of service on the affected device.
CVE-2026-76745 Critical · 9.6 CWE-119 Oct 6, 2026
Unauthenticated Adjacent Memory Corruption Vulnerabilities Leading to Remote Code Execution in AOS-S
Memory corruption vulnerabilities exist in AOS-S that are reachable by an unauthenticated adjacent attacker. Successful exploitation could allow an attacker to execute arbitrary code.
CVE-2026-76744 Critical · 9.8 CWE-120 Oct 6, 2026
Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-S
Buffer overflow vulnerabilities exist in the affected interface of AOS-S. Successful exploitation could allow an unauthenticated remote attacker to execute arbitrary code.
CVE-2026-76743 Critical · 9.8 CWE-287 Oct 6, 2026
Authentication Bypass Vulnerability in the Management Interface of AOS-S
A vulnerability have been identified in the management interface of AOS-S that could potentially allow an unauthenticated remote attacker to circumvent existing authentication controls if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacker to gain unauthorized access to the affected system.
CVE-2026-76742 Critical · 9.8 CWE-269 Oct 6, 2026
Authentication Bypass in the Web Management Interface of AOS-S
Authentication bypass vulnerabilities exist in the web management interface of AOS-S. Successful exploitation could allow an unauthenticated remote attacker to gain unauthorized access to the affected system.
CVE-2026-76741 Medium · 6.5 CWE-121 Oct 6, 2026
Authenticated Buffer Overflow Vulnerabilities lead to Denial-of-Service in AOS-S
Buffer overflow vulnerabilities exist in the affected interface of AOS-S. Successful exploitation could allow an authenticated remote attacker to cause a denial-of-service condition on the affected system.