Threat Intelligence Database

CVE-2026-76748 is a privilege escalation vulnerability in the API of Hewlett Packard Enterprise's AOS-Switch (AOS-S). An authenticated user with read-only access could exploit this flaw to gain administrative privileges on the affected system. This vulnerability affects versions from 16.11.0000 up to and including 16.11.0031. The CVSS v3.1 base score is 8.8, indicating high severity with network attack vector, low attack complexity, and no user interaction required. Confidentiality, integrity, and availability impacts are all high.

CVE-2026-76746 is a critical unauthenticated buffer overflow vulnerability in Hewlett Packard Enterprise's AOS-Switch (AOS-S). An adjacent attacker without authentication can exploit this flaw to expose sensitive memory contents and cause a denial of service on the affected device. The vulnerability affects versions from 16.11.0000 up to and including 16.11.0031. The CVSS 3.1 base score is 9.3, indicating high severity with high impact on confidentiality and availability. No patch or vendor advisory details are provided, so patch status is not confirmed.

CVE-2026-76744 is a critical buffer overflow vulnerability in Hewlett Packard Enterprise (HPE) AOS-Switch (AOS-S) software. It affects versions from 16.11.0000 through 16.11.0031. An unauthenticated remote attacker could exploit this flaw to execute arbitrary code on the affected device. The vulnerability has a high CVSS score of 9.8, indicating severe impact on confidentiality, integrity, and availability. No information about patches or vendor advisories is provided.