CVE-2026-75946: HP OMEN Gaming Hub privilege escalation due to insufficient access controls

CVE-2026-75946 · Severity: info · Published 2026-08-21

HP OMEN Gaming Hub is a gaming-focused software platform bundled on HP gaming computers. A local privilege escalation vulnerability allows an attacker with user-level access to gain elevated system privileges due to weak access control mechanisms, potentially allowing unauthorized system modifications or data access.

Vendors: Hp.

Quick answers

Is CVE-2026-75946 exploited in the wild?
No. Junglewise Threat Intelligence has no report of CVE-2026-75946 being exploited in the wild.
How severe is CVE-2026-75946?
Informational severity, published 21 August 2026.
Which products and versions are affected?
Hp OMEN Gaming Hub prior to 1101.2608.0.0.
Is there a fix for CVE-2026-75946?
A patch was published on 2026-08-21: Version 1101.2608.0.0 and later contain fix Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-75946 attacked?
It is attacked with local access.
Am I affected by CVE-2026-75946?
Check whether you run Hp OMEN Gaming Hub at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

The vulnerability is a privilege escalation flaw stemming from insufficient access controls in OMEN Gaming Hub. An unauthenticated local attacker with standard user privileges can exploit this to escalate to elevated (administrator or system) privileges. The attack vector is local only and does not require network access or special user interaction beyond basic system access. Successful exploitation allows an attacker to modify system settings, install software, or access sensitive data. Versions prior to 1101.2608.0.0 are affected; HP has released patched versions that restrict privileged operations.

Affected products

  • HP OMEN Gaming Hub prior to 1101.2608.0.0

Timeline

  • 2026-08-21: disclosed
  • 2026-08-21: patched: Version 1101.2608.0.0 and later contain fix

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.