CVE-2026-76743: Authentication Bypass Vulnerability in the Management Interface of AOS-S
A vulnerability have been identified in the management interface of AOS-S that could potentially allow an unauthenticated remote attacker to circumvent existing authentication controls if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacker to gain unauthorized access to the affected system.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
An unauthenticated remote attacker could exploit the issue, so no prior account or user interaction is required. Exploitation depends on certain preconditions that are outside the attacker's control.
What access could successful exploitation provide?
Successful exploitation could let an attacker bypass existing authentication controls and gain unauthorized access to the affected system.
Are all AOS-S deployments known to be affected?
The provided information identifies the AOS-S management interface as affected but does not specify affected versions, configurations, or whether the issue is enabled by default.