Description
No description provided
Published: 2026-10-22
Score: 9.8 Critical
EPSS: n/a
KEV: No
Impact: Authentication Bypass in SSH Leading to Complete System Compromise
Action: Immediate Patch
AI Analysis

Impact

Based on the title, the vulnerability permits an attacker to bypass authentication in the AOS-8 SSH daemon, enabling them to log in without valid credentials. This could lead to full compromise of the affected system. The lack of a formal description limits further detail.

Affected Systems

HPE AOS‑8 SSH daemon is affected. No specific version information is provided in the CVE data.

Risk and Exploitability

The CVSS score of 9.8 indicates critical severity. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog, suggesting no publicly known exploitation at present. The likely attack vector is remote via SSH, where an unauthenticated attacker may obtain full control after bypassing the authentication mechanism.

Generated by OpenCVE AI on October 23, 2026 at 04:29 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Verify whether a vendor patch or upgrade for HPE AOS‑8 that addresses the SSH authentication bypass is available and apply it or upgrade immediately.
  • Restrict SSH access by configuring firewall rules to allow only trusted IP addresses or network segments, thereby reducing exposure.
  • Monitor SSH logs for suspicious authentication attempts and block offending IPs, and consider disabling the SSH service if it is not essential to operations.

Generated by OpenCVE AI on October 23, 2026 at 04:29 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Fri, 23 Oct 2026 04:45:00 +0000

Type Values Removed Values Added
Weaknesses CWE-287

Fri, 23 Oct 2026 00:45:00 +0000

Type Values Removed Values Added
Description No description provided
Title Authentication Bypass in the SSH Daemon of AOS-8 leads to Complete System Compromise
References
Metrics cvssV3_1

{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}


Subscriptions

No data.

cve-icon MITRE

Status: PUBLISHED

Assigner: hpe

Published:

Updated: 2026-10-22T19:05:03.382Z

Reserved: 2026-08-25T14:47:27.563Z

Link: CVE-2026-79855

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-10-22T19:17:57.743

Modified: 2026-10-22T19:17:57.743

Link: CVE-2026-79855

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-23T04:30:04Z

Weaknesses