CVE-2026-76749 - Vulnerability Details - OpenCVE

A sensitive information disclosure vulnerability exists in AOS-S. Successful exploitation could allow an unauthenticated remote attacker to access sensitive information.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Vendors	Products
Hewlett Packard Enterprise (hpe)	Aos-switch

No data.

No data.

References

Link	Providers
https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05156en_us&docLocale=en_US

History

Fri, 09 Oct 2026 09:15:00 +0000

Type	Values Removed	Values Added
First Time appeared		Hewlett Packard Enterprise (hpe) Hewlett Packard Enterprise (hpe) aos-switch
Vendors & Products		Hewlett Packard Enterprise (hpe) Hewlett Packard Enterprise (hpe) aos-switch

Wed, 07 Oct 2026 20:30:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Tue, 06 Oct 2026 22:45:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-200

Tue, 06 Oct 2026 19:30:00 +0000

Type	Values Removed	Values Added
Description		A sensitive information disclosure vulnerability exists in AOS-S. Successful exploitation could allow an unauthenticated remote attacker to access sensitive information.
Title		Unauthenticated Sensitive Information Disclosure in AOS-S
References		https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05156en_us&docLocale=en_US
Metrics		cvssV3_1 `{'score': 6.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N'}`

MITRE

Status: PUBLISHED

Assigner: hpe

Published: 2026-10-06T19:06:41.438Z

Updated: 2026-10-07T19:18:49.490Z

Reserved: 2026-08-19T16:14:02.299Z

Link: CVE-2026-76749

Vulnrichment

Updated: 2026-10-07T19:18:44.986Z

NVD

Status : Awaiting Analysis

Published: 2026-10-06T20:17:30.287

Modified: 2026-10-07T20:17:14.820

Link: CVE-2026-76749

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-76749", "assignerOrgId": "eb103674-0d28-4225-80f8-39fb86215de0", "state": "PUBLISHED", "assignerShortName": "hpe", "dateReserved": "2026-08-19T16:14:02.299Z", "datePublished": "2026-10-06T19:06:41.438Z", "dateUpdated": "2026-10-07T19:18:49.490Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "affected", "product": "AOS-Switch (AOS-S)", "vendor": "Hewlett Packard Enterprise (HPE)", "versions": [{"lessThanOrEqual": "16.11.0031", "status": "affected", "version": "16.11.0000", "versionType": "semver"}]}], "credits": [{"lang": "en", "type": "reporter", "value": "Internal security research (HPE Networking)."}], "descriptions": [{"lang": "en", "value": "A sensitive information disclosure vulnerability exists in AOS-S. Successful exploitation could allow an unauthenticated remote attacker to access sensitive information."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "availabilityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "providerMetadata": {"orgId": "eb103674-0d28-4225-80f8-39fb86215de0", "shortName": "hpe", "dateUpdated": "2026-10-06T19:06:41.438Z"}, "references": [{"url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05156en_us&docLocale=en_US"}], "source": {"advisory": "HPESBNW05156", "discovery": "INTERNAL"}, "title": "Unauthenticated Sensitive Information Disclosure in AOS-S", "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-200", "lang": "en", "description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-10-07T19:18:34.879290Z", "id": "CVE-2026-76749", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-07T19:18:49.490Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-76749", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-10-07T19:18:34.879290Z"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-200", "description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-07T19:18:44.986Z"}}], "cna": {"title": "Unauthenticated Sensitive Information Disclosure in AOS-S", "source": {"advisory": "HPESBNW05156", "discovery": "INTERNAL"}, "credits": [{"lang": "en", "type": "reporter", "value": "Internal security research (HPE Networking)."}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Hewlett Packard Enterprise (HPE)", "product": "AOS-Switch (AOS-S)", "versions": [{"status": "affected", "version": "16.11.0000", "versionType": "semver", "lessThanOrEqual": "16.11.0031"}], "defaultStatus": "affected"}], "references": [{"url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05156en_us&docLocale=en_US"}], "x_generator": {"engine": "Vulnogram 0.2.0"}, "descriptions": [{"lang": "en", "value": "A sensitive information disclosure vulnerability exists in AOS-S. Successful exploitation could allow an unauthenticated remote attacker to access sensitive information."}], "providerMetadata": {"orgId": "eb103674-0d28-4225-80f8-39fb86215de0", "shortName": "hpe", "dateUpdated": "2026-10-06T19:06:41.438Z"}}}, "cveMetadata": {"cveId": "CVE-2026-76749", "state": "PUBLISHED", "dateUpdated": "2026-10-07T19:18:49.490Z", "dateReserved": "2026-08-19T16:14:02.299Z", "assignerOrgId": "eb103674-0d28-4225-80f8-39fb86215de0", "datePublished": "2026-10-06T19:06:41.438Z", "assignerShortName": "hpe"}, "dataVersion": "5.2"}