CVE-2026-76744: Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-S
Published Oct 6, 2026
·Updated
Buffer overflow vulnerabilities exist in the affected interface of AOS-S. Successful exploitation could allow an unauthenticated remote attacker to execute arbitrary code.
Affected Software
1 affected component
HPE AOS-S
Event History
Oct 6, 2026
CVE Published
via MITRE·07:06 PM
Data Sourced
via MITRE·07:06 PM
DescriptionSeverity
Data Sourced
via NVD·08:17 PM
DescriptionSeverity
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
The issue can be exploited remotely without authentication. No privileges or user interaction are required according to the supplied severity vector.
2
What is the potential impact of successful exploitation?
A successful attacker could execute arbitrary code on the affected HPE AOS-S system. The reported impact includes compromise of confidentiality, integrity, and availability.