← Back to search

CVE-2026-76748

8.8 HIGH

Published 2026-10-06 · Updated 2026-10-08

AI risk analysis

Summary
The vulnerability allows a read-only user to escalate privileges to administrative access, which could lead to unauthorized control of the system.
Exploitability
Exploitation requires an authenticated read-only user and is considered moderately difficult due to the need for proper authentication credentials.
Blast radius
If exploited, the attacker could gain full administrative access, potentially leading to data theft, system compromise, and broader network attacks.
Detection
No reliable host or network indicator is derivable from the published description.
Prioritized remediation
Upgrade to the latest version of AOS-S or apply the vendor-provided patch immediately.
auth-bypasspriv-escalationapiaos-s

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.

NVD description

A privilege escalation vulnerability exists in the API of AOS-S. Successful exploitation could allow an authenticated read-only user to escalate their privileges and gain administrative access to the affected system.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-269

All references

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

Related by shared AI tags and CWE weakness class. Browse the full archive.