← Back to search

CVE-2026-76743

9.8 CRITICAL

Published 2026-10-06 · Updated 2026-10-08

AI risk analysis

Summary
A vulnerability in AOS-S management interface allows unauthenticated attackers to bypass authentication if specific preconditions are met, potentially leading to unauthorized access.
Exploitability
Exploitation is conditional on preconditions outside the attacker's control, making it moderately difficult.
Blast radius
If exploited, this could result in unauthorized access to the affected system, with significant impact on system integrity and confidentiality.
Detection
No reliable host or network indicator is derivable from the published description.
Prioritized remediation
Disable the affected feature or restrict access to the management interface to prevent unauthorized access.
auth-bypasswebmanagementunauthenticated

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.

NVD description

A vulnerability have been identified in the management interface of AOS-S that could potentially allow an unauthenticated remote attacker to circumvent existing authentication controls if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacker to gain unauthorized access to the affected system.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-287

All references

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

Related by shared AI tags and CWE weakness class. Browse the full archive.