CVE-2026-76748: Authenticated Privilege Escalation Vulnerability in the API of AOS-S
Published Oct 6, 2026
·Updated
A privilege escalation vulnerability exists in the API of AOS-S. Successful exploitation could allow an authenticated read-only user to escalate their privileges and gain administrative access to the affected system.
Affected Software
1 affected component
Aruba AOS-S
Event History
Oct 6, 2026
CVE Published
via MITRE·07:06 PM
Data Sourced
via MITRE·07:06 PM
DescriptionSeverity
Data Sourced
via NVD·08:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this issue?
An authenticated user with read-only access to the affected AOS-S system can exploit it. The provided data does not indicate that unauthenticated attackers can do so.
2
What level of access could an attacker gain?
Successful exploitation could let a read-only user escalate to administrative access. This could affect confidentiality, integrity, and availability of the affected system.
3
Does exploitation require user interaction or complex attack conditions?
The supplied vector indicates network access, low attack complexity, low privileges, and no user interaction. The required starting privilege is an authenticated read-only account.