CVE-2026-76743
9.8 CRITICALPublished 2026-10-06 · Updated 2026-10-08
AI risk analysis
- Summary
- A vulnerability in AOS-S management interface allows unauthenticated attackers to bypass authentication if specific preconditions are met, potentially leading to unauthorized access.
- Exploitability
- Exploitation is conditional on preconditions outside the attacker's control, making it moderately difficult.
- Blast radius
- If exploited, this could result in unauthorized access to the affected system, with significant impact on system integrity and confidentiality.
- Detection
- No reliable host or network indicator is derivable from the published description.
- Prioritized remediation
- Disable the affected feature or restrict access to the management interface to prevent unauthorized access.
Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.
NVD description
A vulnerability have been identified in the management interface of AOS-S that could potentially allow an unauthenticated remote attacker to circumvent existing authentication controls if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacker to gain unauthorized access to the affected system.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-287
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- CRITICALCVE-2026-63456
- CRITICALCVE-2026-105215PoC
- HIGHCVE-2026-39769
- CRITICALCVE-2026-62101
- CRITICALCVE-2026-76742
- HIGHCVE-2026-77226
- HIGHCVE-2026-100606PoC
- HIGHCVE-2026-100607PoC
Related by shared AI tags and CWE weakness class. Browse the full archive.