{"id":"CVE-2026-76743","published":"2026-10-06T20:17:29.603","lastModified":"2026-10-08T04:17:36.107","description":"A vulnerability have been identified in the management interface of AOS-S that could potentially allow an unauthenticated remote attacker to circumvent existing authentication controls if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacker to gain unauthorized access to the affected system.","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-287"],"vendors":[],"products":[],"references":[{"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05156en_us&docLocale=en_US","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A vulnerability in AOS-S management interface allows unauthenticated attackers to bypass authentication if specific preconditions are met, potentially leading to unauthorized access.","exploitability":"Exploitation is conditional on preconditions outside the attacker's control, making it moderately difficult.","blast_radius":"If exploited, this could result in unauthorized access to the affected system, with significant impact on system integrity and confidentiality.","remediation":"Disable the affected feature or restrict access to the management interface to prevent unauthorized access.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["auth-bypass","web","management","unauthenticated"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-10-07T08:43:30.284Z"}}