Executive brief
A vulnerability in HPE's management component allows an unauthenticated attacker on the same network to execute arbitrary commands on the affected system. Successful exploitation could result in complete system compromise and unauthorized access to critical management functions.
Technical details
The vulnerability exists in a management component and permits unauthenticated command execution via an adjacent attack vector. An attacker on the same network segment can exploit this flaw without requiring credentials. Successful exploitation results in arbitrary command execution in the context of the affected utility, potentially leading to full system compromise. The CVSS score of 7.1 reflects the high impact nature of the vulnerability. Patches are available from HPE; administrators should apply updates immediately.
Affected products
- HPE <UNKNOWN> <UNKNOWN>
Timeline
- 2026-09-01: disclosed