Description
No description provided
Published: 2026-10-22
Score: 8.5 High
EPSS: n/a
KEV: No
Impact: Remote Code Execution
Action: Patch Now
AI Analysis

Impact

An authentication bypass flaw in Hewlett Packard Enterprise AOS-8 allows an attacker to gain unauthorized access and execute arbitrary code on the affected system. This vulnerability can compromise confidentiality, integrity, and availability by enabling remote command execution without valid credentials. The CVSS score of 8.5 reflects the high severity and the potential for hostile exploitation.

Affected Systems

The flaw affects Hewlett Packard Enterprise AOS-8. No specific version information is provided, so all releases of AOS-8 potentially remain at risk until a vendor patch is available. The vendor is listed as Hewlett Packard Enterprise (HPE).

Risk and Exploitability

The EPSS score is not available, and the vulnerability is not currently listed in the CISA KEV catalog, so the required expertise for exploitation is not publicly documented. The CVSS score indicates a high likelihood of successful exploitation if an attacker can reach the vulnerable system, likely via remote network interfaces such as web or management services. The attack vector is inferred to be remote, given the authentication bypass leading to code execution. No additional exploit conditions are explicitly stated in the data.

Generated by OpenCVE AI on October 23, 2026 at 04:06 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Check the HPE support site for an official patch or upgrade for AOS-8 and apply it promptly.
  • Apply any available security patch or update to the latest AOS-8 release as soon as it becomes available.
  • Implement network segmentation and firewall rules to restrict traffic to the AOS‑8 management interfaces from untrusted networks.
  • If a patch is not immediately available, limit external access to the device by configuring ACLs or disabling unnecessary management protocols, and monitor logs for anomalous authentication attempts.

Generated by OpenCVE AI on October 23, 2026 at 04:06 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Fri, 23 Oct 2026 04:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-284
CWE-287

Fri, 23 Oct 2026 00:45:00 +0000

Type Values Removed Values Added
Description No description provided
Title Authentication Bypass Leading to Remote Code Execution in AOS-8
References
Metrics cvssV3_1

{'score': 8.5, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H'}


Subscriptions

No data.

cve-icon MITRE

Status: PUBLISHED

Assigner: hpe

Published:

Updated: 2026-10-22T19:05:52.551Z

Reserved: 2026-08-25T14:48:16.470Z

Link: CVE-2026-79881

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-10-22T19:18:00.600

Modified: 2026-10-22T19:18:00.600

Link: CVE-2026-79881

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-23T04:15:18Z

Weaknesses