Description
A privilege escalation vulnerability exists in the API of AOS-S. Successful exploitation could allow an authenticated read-only user to escalate their privileges and gain administrative access to the affected system.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Hewlett Packard Enterprise (HPE) | AOS-Switch (AOS-S) | 16.11.0000 – ≤ 16.11.0031 | — |
Advisories 2
- NCSC-2026-0413 Kwetsbaarheden verholpen in HPE Networking AOS-Switch NCSC-NL (Netherlands) · Oct 12, 2026
- WID-SEC-2026-3760 Aruba ArubaOS Switch: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 6, 2026