PT-2026-66471 · Bosch · Bsh Elp (Electronic Platform) Modules

CVE-2026-56428 · Published 2026-07-30 · Updated 2026-07-30

Mitre

CVSS v3.1

8.1

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

The SSH service on BSH ELP (Electronic Platform) modules contains a platform-specific vulnerability due to an improperly secured default configuration. An insecure, non-revocable SSH public key is included in the firmware's authorized keys file for the root user. An attacker in possession of the corresponding private key could leverage it to bypass authentication and gain root-level access to the appliance.

Fix

Weakness Enumeration

CWE-286

Related Identifiers

CVE-2026-56428

Affected Products

Bsh Elp (Electronic Platform) Modules

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-56428 · Security Note
• https://psirt.bosch.com/security-advisories/BOSCH-SA-943700.html · Vendor Advisory