CVE-2026-76749: Unauthenticated Sensitive Information Disclosure in AOS-S
Published Oct 6, 2026
·Updated
A sensitive information disclosure vulnerability exists in AOS-S. Successful exploitation could allow an unauthenticated remote attacker to access sensitive information.
Affected Software
1 affected component
HPE AOS-S
Event History
Oct 6, 2026
CVE Published
via MITRE·07:06 PM
Data Sourced
via MITRE·07:06 PM
DescriptionSeverity
Data Sourced
via NVD·08:17 PM
DescriptionSeverity
Frequently Asked Questions
1
What systems are exposed to this issue?
The issue affects HPE AOS-S. The provided information does not identify specific affected versions, configurations, or deployment scenarios.
2
Does an attacker need credentials or user interaction to exploit it?
The description states that exploitation can be performed by an unauthenticated remote attacker. The CVSS vector also indicates network reachability, low attack complexity, no user interaction, and no privileges required.
3
What is the expected impact if exploitation succeeds?
Successful exploitation could expose sensitive information. The supplied CVSS vector indicates high confidentiality impact, with no stated integrity or availability impact.