CVE-2026-76746: Hewlett Packard Enterprise HPE Aos-Switch Aos-S

Critical severity, CVSS 9.3. EPSS: 0.2% chance of exploitation in the next 30 days.

An unauthenticated buffer overflow vulnerability exists in AOS-S. Successful exploitation could allow an unauthenticated adjacent attacker to expose sensitive memory contents and cause a denial of service on the affected device.

Affected products

• Hewlett Packard Enterprise HPE Aos-Switch Aos-S: from 16.11.0000, up to and including 16.11.0031

Published 2026-10-06. Last modified 2026-10-07.