CVE-2026-79855: Authentication Bypass in the SSH Daemon of AOS-8 leads to Complete System Compromise

Published Oct 22, 2026

Updated

No description provided

Affected Software

1 affected component

Aruba Networks ArubaOS 8

Event History

Oct 22, 2026

CVE Published

via MITRE·07:05 PM

Data Sourced

via MITRE·07:05 PM

DescriptionSeverity

Frequently Asked Questions

Which systems are exposed to this issue?

Systems running the SSH daemon in Aruba Networks ArubaOS 8 are the affected product scope identified for this CVE. The vulnerability is remotely reachable over the network.

What does an attacker need to exploit it?

The CVSS vector indicates low attack complexity, no required privileges, and no user interaction. This means an unauthenticated remote attacker can attempt exploitation without assistance from a legitimate user.

What is the potential impact of successful exploitation?

Successful exploitation can compromise confidentiality, integrity, and availability at high impact levels. The reported severity is critical, with a CVSS score of 9.8.

CVE-2026-79855: Authentication Bypass in the SSH Daemon of AOS-8 leads to Complete System Compromise

Affected Software

Event History

Frequently Asked Questions

Which systems are exposed to this issue?

What does an attacker need to exploit it?

What is the potential impact of successful exploitation?

Company

Resources

Contact

Frequently Asked Questions

Which systems are exposed to this issue?

What does an attacker need to exploit it?

What is the potential impact of successful exploitation?