Description
No description provided
Published: 2026-10-22
Score: 8.2 High
EPSS: n/a
KEV: No
Impact: Sensitive Information Disclosure via Authentication Bypass
Action: Patch
AI Analysis

Impact

This CVE describes an authentication bypass flaw that could allow an attacker to gain unauthorized access to sensitive data. Because no detailed description is provided, the exact exploitation steps are unclear, but the title indicates that authentication controls are bypassed, potentially exposing confidential configuration or user information.

Affected Systems

The affected vendor is Hewlett Packard Enterprise. The specific product is unspecified and no version information is provided, implying that any unpatched HPE product that implements the compromised authentication mechanism may be vulnerable.

Risk and Exploitability

With a CVSS score of 8.2, the vulnerability is considered high severity. The EPSS score is not available and it is not listed in CISA KEV, suggesting no currently known exploitation. The likely attack vector is network‑based or local, depending on how the product handles authentication; an attacker who can reach a vulnerable instance could bypass authentication and access sensitive information.

Generated by OpenCVE AI on October 23, 2026 at 04:05 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Apply the latest HPE security patch or firmware update for the affected product as soon as possible.
  • If a patch is not yet available, restrict network access to the product through segmentation, and disable any unused authentication endpoints.
  • Monitor the product for unauthorized access attempts by reviewing audit logs and alert on suspicious activity.
  • Enforce strong, frequently rotated passwords for all accounts associated with the product.

Generated by OpenCVE AI on October 23, 2026 at 04:05 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Fri, 23 Oct 2026 04:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-200
CWE-287

Fri, 23 Oct 2026 00:45:00 +0000

Type Values Removed Values Added
Description No description provided
Title Authentication Bypass leads to Sensitive Information Disclosure in AOS-8
References
Metrics cvssV3_1

{'score': 8.2, 'vector': 'CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L'}


Subscriptions

No data.

cve-icon MITRE

Status: PUBLISHED

Assigner: hpe

Published:

Updated: 2026-10-22T19:06:06.236Z

Reserved: 2026-08-25T14:48:16.470Z

Link: CVE-2026-79884

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-10-22T19:18:00.917

Modified: 2026-10-22T19:18:00.917

Link: CVE-2026-79884

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-23T04:15:18Z

Weaknesses
  • CWE-200

    Exposure of Sensitive Information to an Unauthorized Actor

  • CWE-287

    Improper Authentication