# CVE-2026-76719: HPE OneView remote session hijacking vulnerability

Source: https://junglewise.ai/threats/cve-2026-76719-a-security-vulnerability-in-hpe-oneview-may-be-exploited-remotely  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-09-29. Updated: 2026-09-29  
License: CC BY 4.0 with a link back

CVE-2026-76719 · Severity: high · CVSS 8.2 · Published 2026-09-29

HPE OneView is a management platform that orchestrates and monitors servers, storage, and networking in enterprise data centers. A remotely exploitable vulnerability in OneView could allow attackers to hijack user sessions, steal sensitive data, or perform unauthorized administrative actions across the managed infrastructure.

Technologies: [Hpe OneView](https://junglewise.ai/threats/technologies/hpe-oneview). Vendors: [Hpe](https://junglewise.ai/threats/vendors/hpe).

## Quick answers

**Is CVE-2026-76719 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-76719 being exploited in the wild.

**How severe is CVE-2026-76719?** High severity, with a CVSS score of 8.2, published 29 September 2026.

**Which products and versions are affected?** HPE OneView.

**Is there a fix for CVE-2026-76719?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-76719 attacked?** It is attacked over the network, in a web application.

**Am I affected by CVE-2026-76719?** Check whether you run Hpe OneView. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A remote vulnerability in HPE OneView enables session hijacking through an unauthenticated or weakly authenticated network vector. Successful exploitation allows attackers to impersonate legitimate users and perform unauthorized actions including data exfiltration and administrative modifications on managed resources.

## Affected products

- HPE OneView

## Timeline

- 2026-09-29: disclosed

## References

- [https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbgn05140en_us&docLocale=en_US](https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbgn05140en_us&docLocale=en_US)

## Related threats

- [HPE OneView open redirect](https://junglewise.ai/threats/cve-2026-76720-a-vulnerability-in-hpe-oneview-can-be-remotely-exploited-to-cause)
- [HPE OneView session hijacking and unauthorized actions](https://junglewise.ai/threats/cve-2026-76718-a-potential-security-vulnerability-in-hpe-oneview-can-be)