Description
No description provided
Published: 2026-10-22
Score: 9.6 Critical
EPSS: n/a
KEV: No
Impact: Authentication Bypass Leading to Full System Compromise
Action: Immediate Patch
AI Analysis

Impact

The reported vulnerability enables an attacker to bypass authentication controls on Hewlett Packard Enterprise’s AOS‑8 platform, granting unrestricted access. With this access, a malicious actor could execute commands, modify system configurations, or exfiltrate data, effectively compromising the entire system. While the official description is absent, the title implies that all aspects of confidentiality, integrity, and availability would be jeopardized.

Affected Systems

Affected systems are Hewlett Packard Enterprise devices running the AOS‑8 operating environment. No specific version numbers are provided, so all installations of AOS‑8 should be treated as potentially vulnerable until official advisories specify fixed releases.

Risk and Exploitability

The CVSS score of 9.6 categorizes the flaw as critical. EPSS data is unavailable and the vulnerability is not listed in the CISA KEV catalog, yet the high severity alone indicates a substantial risk of exploitation. The attack vector appears to involve authentication bypass, likely requiring network access to the affected system’s services. Consequently, any network‑connected AOS‑8 deployment that has not been patched is at high risk of compromise.

Generated by OpenCVE AI on October 23, 2026 at 04:11 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Confirm the current AOS‑8 firmware version and consult Hewlett Packard Enterprise support for any security releases that address the authentication bypass.
  • Apply the latest security patch or firmware update for AOS‑8 as soon as it becomes available; if no update is available, enforce network segmentation or firewall rules to isolate the unit and disable exposed authentication services.
  • Strengthen monitoring of authentication logs and network traffic for indicators of bypass attempts, and block any suspicious IP addresses that attempt to exploit the vulnerability.

Generated by OpenCVE AI on October 23, 2026 at 04:11 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Fri, 23 Oct 2026 04:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-287

Fri, 23 Oct 2026 00:45:00 +0000

Type Values Removed Values Added
Description No description provided
Title Authentication Bypass Vulnerabilities lead to Complete System Compromise in AOS-8
References
Metrics cvssV3_1

{'score': 9.6, 'vector': 'CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H'}


Subscriptions

No data.

cve-icon MITRE

Status: PUBLISHED

Assigner: hpe

Published:

Updated: 2026-10-22T19:05:28.687Z

Reserved: 2026-08-25T14:48:06.470Z

Link: CVE-2026-79868

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-10-22T19:17:59.177

Modified: 2026-10-22T19:17:59.177

Link: CVE-2026-79868

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-23T04:15:18Z

Weaknesses