Description
A vulnerability have been identified in the management interface of AOS-S that could potentially allow an unauthenticated remote attacker to circumvent existing authentication controls if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacker to gain unauthorized access to the affected system.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Hewlett Packard Enterprise (HPE) | AOS-Switch (AOS-S) | 16.11.0000 – ≤ 16.11.0031 | — |
Advisories 2
- NCSC-2026-0413 Kwetsbaarheden verholpen in HPE Networking AOS-Switch NCSC-NL (Netherlands) · Oct 12, 2026
- WID-SEC-2026-3760 Aruba ArubaOS Switch: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 6, 2026