CVE-2026-56428

The SSH service on BSH ELP (Electronic Platform) modules contains a platform-specific vulnerability due to an improperly secured default configuration. An insecure, non-revocable SSH public key is included in the firmware's authorized_keys file for the root user. An attacker in possession of the corresponding private key could leverage it to bypass authentication and gain root-level access to the appliance.

• CWE-286

• https://psirt.bosch.com/security-advisories/BOSCH-SA-943700.html

Published

Jul 30, 2026

Last Modified

Jul 30, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-56416In NLnet Labs Unbound up to and including version 1.25.1, wh…4.8
• CVE-2026-5642A vulnerability was determined in Cyber-III Student-Manageme…7.3
• CVE-2026-56422Multiple MISP core controllers and model capture paths accep…9.4
• CVE-2026-56423MISP Core contained broken access-control checks in the bulk…8.8
• CVE-2026-56424MISP core contained multiple broken access-control flaws whe…8.8
• CVE-2026-56425The Azure Active Directory (AAD) authentication implementati…8.8
• CVE-2026-5643A vulnerability was identified in Cyber-III Student-Manageme…2.4
• CVE-2026-56434NGINX Plus and NGINX Open Source have a vulnerability in the…8.3
• CVE-2026-56437Uncontrolled search path element issue exists in Pupsman ver…8.4
• CVE-2026-5644A security flaw has been discovered in Cyber-III Student-Man…2.4
• CVE-2026-56444In NLnet Labs Unbound 1.20.0 up to and including 1.25.1, whe…5.9
• CVE-2026-56445The qrscp application's C-STORE handler uses a specific inst…9.1