CVE-2026-76748 — Authenticated Privilege Escalation Vulnerability in the API of AOS-S

CVE-2026-76748

Authenticated Privilege Escalation Vulnerability in the API of AOS-S PUBLISHED

Description (CNA)

A privilege escalation vulnerability exists in the API of AOS-S. Successful exploitation could allow an authenticated read-only user to escalate their privileges and gain administrative access to the affected system.

Affected (CNA)

Vendor / product	Versions
Hewlett Packard Enterprise (HPE) / AOS-Switch (AOS-S)	affected 16.11.0000 through 16.11.0031

CWE

No CWE identifiers supplied.

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05156en_us&docLocale=en_US

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.