CVE-2026-76743
CriticalCVSS 9.8Summary
A vulnerability in the management interface of AOS-S could potentially allow an unauthenticated remote attacker to circumvent existing authentication controls if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacker to gain unauthorized access to the affected system.
Risk Assessment
Risk of unauthorized system access, potentially leading to data confidentiality and integrity breaches.
Recommendation
Apply AOS-S patches and monitor management interface logs for suspicious activity.
Other vulnerabilities in AOS-S
See all- CVE-2026-76749Medium
A sensitive information disclosure vulnerability exists in AOS-S. Successful exploitation could allow an unauthenticated remote attacker to access sensitive information.
- CVE-2026-76748High
A privilege escalation vulnerability in the API of AOS-S allows an authenticated read-only user to escalate privileges and gain administrative access to the system.
- CVE-2026-76741Medium
Buffer overflow vulnerabilities exist in the affected interface of AOS-S. Successful exploitation could allow an authenticated remote attacker to cause a denial-of-service condition on the affected system.
- CVE-2026-76747Critical
Buffer overflow vulnerabilities in the affected interface of AOS-S. Successful exploitation could allow an unauthenticated remote attacker to expose sensitive memory contents and cause a denial of service on the device.
- CVE-2026-76746Critical
An unauthenticated buffer overflow vulnerability exists in AOS-S. Successful exploitation could allow an unauthenticated adjacent attacker to expose sensitive memory contents and cause a denial of service on the affected device.
- CVE-2026-76745Critical
Memory corruption vulnerabilities exist in AOS-S that are reachable by an unauthenticated adjacent attacker. Successful exploitation could allow an attacker to execute arbitrary code.
- CVE-2026-76744Critical
Buffer overflow vulnerabilities exist in the affected interface of AOS-S. Successful exploitation could allow an unauthenticated remote attacker to execute arbitrary code.
- CVE-2026-76742Critical
Authentication bypass vulnerabilities exist in the web management interface of AOS-S. Successful exploitation could allow an unauthenticated remote attacker to gain unauthorized access to the affected system.
Original NVD description (English source)
A vulnerability have been identified in the management interface of AOS-S that could potentially allow an unauthenticated remote attacker to circumvent existing authentication controls if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacker to gain unauthorized access to the affected system.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS