CVE-2026-76742: Hewlett Packard Enterprise HPE Aos-Switch Aos-S

Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days.

Authentication bypass vulnerabilities exist in the web management interface of AOS-S. Successful exploitation could allow an unauthenticated remote attacker to gain unauthorized access to the affected system.

Affected products

• Hewlett Packard Enterprise HPE Aos-Switch Aos-S: from 16.11.0000, up to and including 16.11.0031

Published 2026-10-06. Last modified 2026-10-08.