CVE-2026-76747: Hewlett Packard Enterprise HPE Aos-Switch Aos-S

Critical severity, CVSS 9.1. EPSS: 0.4% chance of exploitation in the next 30 days.

Buffer overflow vulnerabilities exist in the affected interface of AOS-S. Successful exploitation could allow an unauthenticated remote attacker to expose sensitive memory contents and cause a denial of service on the device.

Affected products

• Hewlett Packard Enterprise HPE Aos-Switch Aos-S: from 16.11.0000, up to and including 16.11.0031

Published 2026-10-06. Last modified 2026-10-07.