CVE-2026-76742: Authentication Bypass in the Web Management Interface of AOS-S
Published Oct 6, 2026
·Updated
Authentication bypass vulnerabilities exist in the web management interface of AOS-S. Successful exploitation could allow an unauthenticated remote attacker to gain unauthorized access to the affected system.
Affected Software
1 affected component
HPE AOS-S
Event History
Oct 6, 2026
CVE Published
via MITRE·07:06 PM
Data Sourced
via MITRE·07:06 PM
DescriptionSeverity
Data Sourced
via NVD·08:17 PM
DescriptionSeverity
Frequently Asked Questions
1
Who can exploit this issue?
An unauthenticated remote attacker could exploit the vulnerability. No prior privileges or user interaction are required according to the supplied severity vector.
2
What security impact could successful exploitation have?
Successful exploitation could give an attacker unauthorized access to the affected system. The severity vector indicates potential high impact to confidentiality, integrity, and availability.