CVE-2026-76744

Awaiting Analysis Awaiting Analysis - Queue

BaseFortify

Publication date: 2026-10-06

Last updated on: 2026-10-08

Assigner: Hewlett Packard Enterprise (HPE)

Description

Buffer overflow vulnerabilities exist in the affected interface of AOS-S. Successful exploitation could allow an unauthenticated remote attacker to execute arbitrary code.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-06

Last Modified

2026-10-08

Generated

2026-10-19

AI Q&A

2026-10-07

EPSS Evaluated

2026-10-18

NVD

CVE-2026-76744

EUVD

EUVD-2026-93978

Affected Vendors & Products

Vendor	Product	Version / Range
Hewlett	Packard	Enterprise (HPE) AOS-Switch (AOS-S) 16.11.0000

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-120	The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

Attack-Flow Graph

Executive Summary

This is a buffer overflow vulnerability in HPE AOS-Switch (AOS-S) interface. It allows an unauthenticated remote attacker to execute arbitrary code by exploiting a flaw in the affected interface.

Impact Analysis

An attacker could gain control of the affected system, leading to potential data breaches, system compromise, or disruption of network services. The high CVSS score indicates severe impact.

Compliance Impact

This vulnerability could lead to unauthorized access, data exfiltration, or system manipulation, which may violate compliance requirements such as GDPR or HIPAA due to potential data breaches or loss of integrity.

Mitigation Strategies

Apply the latest security patches or updates provided by HPE for AOS-S to address the buffer overflow vulnerability. Isolate affected systems from untrusted networks until patched. Monitor network traffic for unusual activity targeting the vulnerable interface.

Hi! I’m here to help you understand CVE-2026-76744. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70