CVE-2026-76742 Authentication Bypass in the Web Management Interface of AOS-S

Authentication bypass vulnerabilities exist in the web management interface of AOS-S. Successful exploitation could allow an unauthenticated remote attacker to gain unauthorized access to the affected system...

CVE-2026-76741 Authenticated Buffer Overflow Vulnerabilities lead to Denial-of-Service in AOS-S

Buffer overflow vulnerabilities exist in the affected interface of AOS-S. Successful exploitation could allow an authenticated remote attacker to cause a denial-of-service condition on the affected system...

EUVD-2026-93975

Buffer overflow vulnerabilities exist in the affected interface of AOS-S. Successful exploitation could allow an authenticated remote attacker to cause a denial-of-service condition on the affected system...

CVE-2026-76741

AOS-S is subject to buffer overflow vulnerabilities within its affected interface. If successfully exploited by an authenticated remote attacker , these vulnerabilities can lead to a denial-of-service (DoS) condition on the affected system. No specific software versions, root causes, or remediati...

CVE-2026-76741 Authenticated Buffer Overflow Vulnerabilities lead to Denial-of-Service in AOS-S

Buffer overflow vulnerabilities exist in the affected interface of AOS-S. Successful exploitation could allow an authenticated remote attacker to cause a denial-of-service condition on the affected system...

CVE-2026-23813

CVE-2026-23813 — AOS-CX 사전 인증pre-auth 인증 우회 인증되지 않은 원격 공격자가 nginx의 과도하게 허용적인 버전 정규식을 통해 login 토큰을 밀반입하여 AOS-CX 관리 REST API에 도달할 수 있으며, OVSDB 기반 구성 표면해시된 관리자 자격 증명 포함이 노출됩니다. CVE: CVE-2026-23813 CWE-287 · CVSS 9.8 Critical 벤더: HPE Aruba Networking · 제품: AOS-CX 분석 보고서:...

PT-2026-107125

Unpatched vulnerabilities don't stay hidden on our atlas. CVE CRITICAL VULNERABILITY DETECTED CVE ID → CVE-2026-76747 Vendor → Unknown Severity → Critical — CVSS 9.1 Product → Unknown Date → 2026-10-06 A critical vulnerability Classic Buffer Overflow has been disclosed affecting Unknown. Patch...

PT-2026-107119

Buffer overflow vulnerabilities exist in the affected interface of AOS-S. Successful exploitation could allow an authenticated remote attacker to cause a denial-of-service condition on the affected system...

PT-2026-107126

A privilege escalation vulnerability exists in the API of AOS-S. Successful exploitation could allow an authenticated read-only user to escalate their privileges and gain administrative access to the affected system...

PT-2026-107121

Unpatched vulnerabilities don't stay hidden on our atlas. CVE CRITICAL VULNERABILITY DETECTED CVE ID → CVE-2026-76743 Vendor → Unknown Severity → Critical — CVSS 9.8 Product → Unknown Date → 2026-10-06 A critical vulnerability Improper Authentication has been disclosed affecting Unknown. Patch...

PT-2026-107122

Name of the Vulnerable Software and Affected Versions AOS-S versions prior to 16.11.0032 Description Buffer overflow flaws exist in the affected interface, which could allow an unauthenticated remote attacker to execute arbitrary code. A buffer overflow occurs when a program writes more data to a...

PT-2026-107120

Name of the Vulnerable Software and Affected Versions AOS-S affected versions not specified Description Authentication bypass flaws exist in the web management interface. This issue allows an unauthenticated remote attacker to gain unauthorized access to the system through improper privilege...

PT-2026-107127

A sensitive information disclosure vulnerability exists in AOS-S. Successful exploitation could allow an unauthenticated remote attacker to access sensitive information...

PT-2026-107123

Unpatched vulnerabilities don't stay hidden on our atlas. CVE CRITICAL VULNERABILITY DETECTED CVE ID → CVE-2026-76745 Vendor → Unknown Severity → Critical — CVSS 9.6 Product → Unknown Date → 2026-10-06 A critical vulnerability Improper Restriction of Operations within the Bounds of a Memory Buffe...

PT-2026-107124

Unpatched vulnerabilities don't stay hidden on our atlas. CVE CRITICAL VULNERABILITY DETECTED CVE ID → CVE-2026-76746 Vendor → Unknown Severity → Critical — CVSS 9.3 Product → Unknown Date → 2026-10-06 A critical vulnerability Classic Buffer Overflow has been disclosed affecting Unknown. Patch...

HPESBNW05156 rev 1 - Multiple Vulnerabilities in HPE Networking AOS-Swtich (AOS-S)

Potential Security Impact: Remote: Multiple Vulnerabilities SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba 2530 Switch Series - Please refer to Vulnerability Summary for details about affected HPE Networking AOS-Switch AOS-S software versions - Any hardware running the...

CVE-2026-73782

A format string vulnerability exists in the command line interface of AOS-CX that could lead to unauthenticated remote code execution. Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system...

CVE-2026-73783

Stack overflow vulnerabilities exist in an API endpoint of AOS-CX. Successful exploitation could allow an authenticated malicious actor to cause a denial-of-service condition on the affected system...

CVE-2026-73781

A vulnerability in the web-based management interface of AOS-CX could allow an authenticated remote attacker to conduct a stored cross-site scripting XSS attack against an administrative user of the interface. A successful exploit allows an attacker to execute arbitrary script code in a victim's...

CVE-2026-73776

A signature verification bypass vulnerability exists in the command line interface of AOS-CX. Successful exploitation could allow an authenticated malicious actor with administrative privileges to execute arbitrary code on the underlying operating system, when certain pre-conditions outside of th...