# HP-UX vulnerabilities Source: https://junglewise.ai/threats/technologies/hp-ux Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 11 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/hp-ux.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 40 vulnerabilities in HP-UX: 0 in the last 7 days and 0 in the last 90 days, 4 of them critical and 0 exploited in the wild. The most recent, CVE-2026-13476, was published on 12 August 2026. ## Counts - Last 7 days: 0 - Last 30 days: 0 - Last 90 days: 0 - All time: 40 (4 critical, 0 exploited in the wild) ## About HP-UX HP-UX is a Unix operating system developed by Hewlett-Packard for its PA-RISC and Itanium servers. ## Latest HP-UX vulnerabilities - [CVE-2026-13476: IBM Informix Dynamic Server 14.10, 15.0, and 12.10 could allow an unauthenticated user to execute arbitrary commands…](https://junglewise.ai/threats/cve-2026-13476-ibm-informix-dynamic-server-14-10-15-0-and-12-10-could-allow-an) (high, CVSS 7.3, published 12 Aug 2026) - [CVE-2026-13367: IBM Informix Dynamic Server 14.10, and 15.0 contain a local privilege escalation vulnerability in the oninit setuid-root…](https://junglewise.ai/threats/cve-2026-13367-ibm-informix-dynamic-server-14-10-and-15-0-contain-a-local) (high, CVSS 7.8, published 12 Aug 2026) - [CVE-1999-0016: Multiple Vendors TCP/IP Land denial of service](https://junglewise.ai/threats/cve-1999-0016-multiple-vendors-tcp-ip-land-denial-of-service) (medium, CVSS 5, published 1 Dec 1997) - [CVE-1999-0210: Sun Solaris automountd command injection via shell metacharacters](https://junglewise.ai/threats/cve-1999-0210-sun-solaris-automountd-command-injection-via-shell-metacharacters) (critical, CVSS 10, published 26 Nov 1997) - [CVE-1999-0216: Linux inetd denial of service via SYN and RST packets](https://junglewise.ai/threats/cve-1999-0216-linux-inetd-denial-of-service-via-syn-and-rst-packets) (medium, CVSS 5, published 1 Nov 1997) - [CVE-1999-0326: HP HP-UX vulnerability in mediainit](https://junglewise.ai/threats/cve-1999-0326-hp-hp-ux-vulnerability-in-mediainit) (medium, CVSS 4.6, published 1 Oct 1997) - [CVE-1999-1213: HP HP-UX denial of service in telnet service](https://junglewise.ai/threats/cve-1999-1213-hp-hp-ux-denial-of-service-in-telnet-service) (medium, CVSS 5, published 1 Oct 1997) - [CVE-1999-1139: HP HP-UX arbitrary file overwrite in CUE via symlink attack](https://junglewise.ai/threats/cve-1999-1139-hp-hp-ux-arbitrary-file-overwrite-in-cue-via-symlink-attack) (high, CVSS 7.2, published 1 Sep 1997) - [CVE-1999-1133: HP HP-UX privilege escalation in X Windows utilities](https://junglewise.ai/threats/cve-1999-1133-hp-hp-ux-privilege-escalation-in-x-windows-utilities) (medium, CVSS 4.6, published 1 Sep 1997) - [CVE-1999-0524: Multiple Vendors ICMP Information Disclosure via Netmask and Timestamp Requests](https://junglewise.ai/threats/cve-1999-0524-multiple-vendors-icmp-information-disclosure-via-netmask-and) (low, CVSS 2.1, published 1 Aug 1997) - [CVE-1999-1308: HP HP-UX privilege escalation via large UID or GID](https://junglewise.ai/threats/cve-1999-1308-hp-hp-ux-privilege-escalation-via-large-uid-or-gid) (medium, CVSS 4.6, published 31 Jul 1997) - [CVE-1999-0962: HP HP-UX buffer overflow in passwd command](https://junglewise.ai/threats/cve-1999-0962-hp-hp-ux-buffer-overflow-in-passwd-command) (high, CVSS 7.2, published 14 May 1997) - [CVE-1999-1408: IBM AIX and HP-UX denial of service via socket reuse](https://junglewise.ai/threats/cve-1999-1408-ibm-aix-and-hp-ux-denial-of-service-via-socket-reuse) (low, CVSS 2.1, published 5 Mar 1997) - [CVE-1999-0046: Multiple Vendors rlogin buffer overflow via TERM environment variable](https://junglewise.ai/threats/cve-1999-0046-multiple-vendors-rlogin-buffer-overflow-via-term-environment) (critical, CVSS 10, published 6 Feb 1997) - [CVE-1999-1160: HP HP-UX privilege escalation in ftpd and kftpd](https://junglewise.ai/threats/cve-1999-1160-hp-hp-ux-privilege-escalation-in-ftpd-and-kftpd) (critical, CVSS 10, published 2 Feb 1997) - [CVE-1999-0309: HP HP-UX privilege escalation in vgdisplay](https://junglewise.ai/threats/cve-1999-0309-hp-hp-ux-privilege-escalation-in-vgdisplay) (high, CVSS 7.2, published 1 Feb 1997) - [CVE-1999-1088: HP HP-UX privilege escalation in chsh command](https://junglewise.ai/threats/cve-1999-1088-hp-hp-ux-privilege-escalation-in-chsh-command) (high, CVSS 7.2, published 9 Jan 1997) - [CVE-1999-1311: HP HP-UX authentication bypass in dtlogin and dtsession](https://junglewise.ai/threats/cve-1999-1311-hp-hp-ux-authentication-bypass-in-dtlogin-and-dtsession) (medium, CVSS 4.6, published 7 Jan 1997) - [CVE-1999-1249: HP HP-UX privilege escalation in movemail](https://junglewise.ai/threats/cve-1999-1249-hp-hp-ux-privilege-escalation-in-movemail) (medium, CVSS 4.6, published 6 Jan 1997) - [CVE-1999-1251: HP HP-UX denial of service in direct audio user space code](https://junglewise.ai/threats/cve-1999-1251-hp-hp-ux-denial-of-service-in-direct-audio-user-space-code) (low, CVSS 2.1, published 24 Dec 1996) - [CVE-1999-0127: HP HP-UX arbitrary file overwrite in swinstall and swmodify](https://junglewise.ai/threats/cve-1999-0127-hp-hp-ux-arbitrary-file-overwrite-in-swinstall-and-swmodify) (high, CVSS 7.2, published 19 Dec 1996) - [CVE-1999-1089: HP HP-UX buffer overflow in chfn command](https://junglewise.ai/threats/cve-1999-1089-hp-hp-ux-buffer-overflow-in-chfn-command) (high, CVSS 7.2, published 13 Dec 1996) - [CVE-1999-0050: HP HP-UX buffer overflow in newgrp](https://junglewise.ai/threats/cve-1999-0050-hp-hp-ux-buffer-overflow-in-newgrp) (high, CVSS 7.2, published 1 Dec 1996) - [CVE-1999-1161: HP HP-UX privilege escalation in ppl via core dump](https://junglewise.ai/threats/cve-1999-1161-hp-hp-ux-privilege-escalation-in-ppl-via-core-dump) (high, CVSS 7.2, published 3 Nov 1996) - [CVE-1999-0336: HP HP-UX buffer overflow in mstm](https://junglewise.ai/threats/cve-1999-0336-hp-hp-ux-buffer-overflow-in-mstm) (high, CVSS 7.2, published 1 Nov 1996) ## Most severe HP-UX vulnerabilities - [CVE-1999-0210: Sun Solaris automountd command injection via shell metacharacters](https://junglewise.ai/threats/cve-1999-0210-sun-solaris-automountd-command-injection-via-shell-metacharacters) (critical, CVSS 10, published 26 Nov 1997) - [CVE-1999-0046: Multiple Vendors rlogin buffer overflow via TERM environment variable](https://junglewise.ai/threats/cve-1999-0046-multiple-vendors-rlogin-buffer-overflow-via-term-environment) (critical, CVSS 10, published 6 Feb 1997) - [CVE-1999-1160: HP HP-UX privilege escalation in ftpd and kftpd](https://junglewise.ai/threats/cve-1999-1160-hp-hp-ux-privilege-escalation-in-ftpd-and-kftpd) (critical, CVSS 10, published 2 Feb 1997) - [CVE-1999-0246: HP Remote Watch remote root access vulnerability](https://junglewise.ai/threats/cve-1999-0246-hp-remote-watch-remote-root-access-vulnerability) (critical, CVSS 10, published 1 Oct 1996) - [CVE-2026-13367: IBM Informix Dynamic Server 14.10, and 15.0 contain a local privilege escalation vulnerability in the oninit setuid-root…](https://junglewise.ai/threats/cve-2026-13367-ibm-informix-dynamic-server-14-10-and-15-0-contain-a-local) (high, CVSS 7.8, published 12 Aug 2026) - [CVE-2026-13476: IBM Informix Dynamic Server 14.10, 15.0, and 12.10 could allow an unauthenticated user to execute arbitrary commands…](https://junglewise.ai/threats/cve-2026-13476-ibm-informix-dynamic-server-14-10-15-0-and-12-10-could-allow-an) (high, CVSS 7.3, published 12 Aug 2026) - [CVE-1999-1139: HP HP-UX arbitrary file overwrite in CUE via symlink attack](https://junglewise.ai/threats/cve-1999-1139-hp-hp-ux-arbitrary-file-overwrite-in-cue-via-symlink-attack) (high, CVSS 7.2, published 1 Sep 1997) - [CVE-1999-0962: HP HP-UX buffer overflow in passwd command](https://junglewise.ai/threats/cve-1999-0962-hp-hp-ux-buffer-overflow-in-passwd-command) (high, CVSS 7.2, published 14 May 1997) - [CVE-1999-0309: HP HP-UX privilege escalation in vgdisplay](https://junglewise.ai/threats/cve-1999-0309-hp-hp-ux-privilege-escalation-in-vgdisplay) (high, CVSS 7.2, published 1 Feb 1997) - [CVE-1999-1088: HP HP-UX privilege escalation in chsh command](https://junglewise.ai/threats/cve-1999-1088-hp-hp-ux-privilege-escalation-in-chsh-command) (high, CVSS 7.2, published 9 Jan 1997) ## Vulnerabilities per week Nothing was published in the last eight weeks. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Other Hp technologies - [HPLIP](https://junglewise.ai/threats/technologies/hplip): 10 vulnerabilities - [Hp Linux Imaging](https://junglewise.ai/threats/technologies/linux-imaging): 9 vulnerabilities - [Hp Printing](https://junglewise.ai/threats/technologies/printing): 9 vulnerabilities - [Hp Advance](https://junglewise.ai/threats/technologies/advance): 3 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "HP-UX vulnerabilities", https://junglewise.ai/threats/technologies/hp-ux, 11 November 2026.