What is the CVSS score of CVE-2026-2915?

CVE-2026-2915 has a CVSS 3.1 base score of 7.1 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of System Event Utility are affected by CVE-2026-2915?

HP System Event Utility installations are vulnerable to denial of service attacks and arbitrary file writes that could compromise system stability and data integrity.

How to fix or mitigate CVE-2026-2915?

Within 24 hours: Inventory all systems running HP System Event Utility and identify current versions below 3.2.16. Within 7 days: Implement network segmentation to restrict access to affected systems and disable the utility if not business-critical. Within 30 days: Monitor HP security advisories for patch release and establish expedited deployment procedures; contact HP support for interim guidance if available.

System Event Utility CVE-2026-2915

HIGH

Incorrect Default Permissions (CWE-276)

2026-03-03 hp-security-alert@hp.com

Denial Of Service System Event Utility

7.1

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.1 HIGH

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 22:05 vuln.today

CVE Published

Mar 03, 2026 - 20:16 nvd

HIGH 7.1

DescriptionCVE.org

HP System Event Utility might allow denial of service with elevated arbitrary file writes. This potential vulnerability was remediated with HP System Event Utility version 3.2.16.

AnalysisAI

HP System Event Utility versions prior to 3.2.16 allow local authenticated users to corrupt system integrity and cause denial of service through arbitrary file writes with elevated privileges. An attacker with local access and valid credentials can leverage this vulnerability to modify critical files and disrupt system availability. No patch is currently available for affected installations.

Technical ContextAI

Classified as CWE-276 (Incorrect Default Permissions). Affects System Event Utility. HP System Event Utility might allow denial of service with elevated arbitrary file writes. This potential vulnerability was remediated with HP System Event Utility version 3.2.16.