CVE-2026-76743: Hewlett Packard Enterprise HPE Aos-Switch Aos-S

Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days.

A vulnerability have been identified in the management interface of AOS-S that could potentially allow an unauthenticated remote attacker to circumvent existing authentication controls if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacker to gain unauthorized access to the affected system.

Affected products

• Hewlett Packard Enterprise HPE Aos-Switch Aos-S: from 16.11.0000, up to and including 16.11.0031

Published 2026-10-06. Last modified 2026-10-08.