{"id":"CVE-2026-79868","published":"2026-10-22T19:17:59.177","lastModified":"2026-10-26T14:18:54.933","description":"Authentication bypass vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative access, modify system configurations, and access or manipulate sensitive data, leading to complete compromise of the affected system.","cvssScore":9.6,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","cwes":[],"vendors":[],"products":[],"references":[{"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05162en_us&docLocale=en_US","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"An authentication bypass flaw in AOS-8 allows unauthenticated adjacent attackers to circumvent existing authentication controls, potentially granting full administrative access and enabling complete system compromise including data theft and configuration tampering.","exploitability":"Exploitation requires the attacker to be on the same adjacent network segment with no authentication or user interaction needed, making it highly exploitable in insider or compromised-physical-access scenarios.","blast_radius":"Successful exploitation leads to full system compromise: attackers can execute arbitrary commands, modify critical configurations, and exfiltrate sensitive data without detection under administrative privileges.","remediation":"Upgrade to AOS-8 version 2.590 or later, as this is the fixed version that addresses CVE-2026-79868.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["auth-bypass","adjacent","admin-access","aos-8"],"model":"garnet-coder","analyzedAt":"2026-10-25T08:46:51.254Z"}}