8.8
High
CVE-2026-76748 A privilege escalation vulnerability exists in the API of AOS-S
Description
A privilege escalation vulnerability exists in the API of AOS-S. Successful exploitation could allow an authenticated read-only user to escalate their privileges and gain administrative access to the affected system.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| AOS-Switch (AOS-S) 16.11 | 16.11.0000 → 16.11.0031 | No fix stated |
Other CVEs of AOS-Switch (AOS-S)
The 9 CVEs of AOS-Switch (AOS-S) →
CVE-2026-76749
A sensitive information disclosure vulnerability exists in AOS-S
6.5
Medium
CVE-2026-76747
Buffer overflow vulnerabilities exist in the affected interface of AOS-S
9.1
Critical
CVE-2026-76746
An unauthenticated buffer overflow vulnerability exists in AOS-S
9.3
Critical
CVE-2026-76745
Memory corruption vulnerabilities exist in AOS-S that are reachable by an unauthenticated adjacent attacker
9.6
Critical