{"id":"CVE-2026-76746","published":"2026-10-06T20:17:29.957","lastModified":"2026-10-07T20:17:14.430","description":"An unauthenticated buffer overflow vulnerability exists in AOS-S. Successful exploitation could allow an unauthenticated adjacent attacker to expose sensitive memory contents and cause a denial of service on the affected device.","cvssScore":9.3,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:H","cwes":["CWE-120"],"vendors":[],"products":[],"references":[{"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05156en_us&docLocale=en_US","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A buffer overflow vulnerability in AOS-S allows unauthenticated adjacent attackers to expose sensitive memory contents and cause a denial of service, posing a significant risk to networked devices.","exploitability":"Exploitation requires proximity to the affected device and could be moderately difficult due to the need for precise buffer manipulation.","blast_radius":"If exploited, the vulnerability could impact the availability of the affected device and potentially adjacent networked systems.","remediation":"Upgrade to the latest version of AOS-S as soon as possible.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["buffer-overflow","dos","unauthenticated","memory-exposure"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-10-07T08:44:04.930Z"}}