Executive brief
An HPE product contains a privilege escalation vulnerability in command-line operations that allows an authenticated low-privilege user to execute arbitrary commands with elevated privileges on the underlying operating system. A compromised standard user account could be leveraged to gain administrative control, enabling attackers to fully compromise system integrity and access sensitive data.
Technical details
This vulnerability is a privilege escalation flaw in affected command-line operations that allows an authenticated low-privileged user to execute arbitrary commands as a privileged user on the underlying operating system. The vulnerability requires user authentication and local or network access to the command-line interface. An attacker with a low-privilege account can exploit this to gain privileged execution and run arbitrary system commands. The vulnerability has been reported with a CVSS score of 8.8 (high severity) and is tracked as CVE-2026-73753. Patches may be available through HPE support channels.
Affected products
- HPE <UNKNOWN>
Timeline
- 2026-09-01: published
- 2026-09-01: disclosed