WARNING: Critical Authentication Bypass and Buffer Overflow Vulnerabilities in HPE Networking AOS-Switch (AOS-S) Can Be Exploited to Gain Unauthorized Access and Execute Arbitrary Code, Patch Immediately!

**Executive summary:** Three critical vulnerabilities (CVE-2026-76742, CVE-2026-76743, CVE-2026-76744) affect HPE Aruba AOS-Switch (AOS-S) on numerous switch models; the issues include two authentication bypasses and multiple buffer overflows that can enable unauthenticated remote attackers to gain full control (CVSS 9.8 each). The advisory from the vendor and Centre for Cybersecurity Belgium recommends immediate patching, thorough testing, and enhanced monitoring to detect potential compromises.