What is the CVSS score of CVE-2026-4667?

CVE-2026-4667 has a CVSS 4.0 base score of 7.3 (High). CVSS vector: CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N. EPSS exploitation probability: 0.0%.

Is there a patch available for CVE-2026-4667?

Yes, a patch is available for CVE-2026-4667. Update the affected software to the latest version immediately.

HP Omen Gaming Hub CVE-2026-4667

EUVD-2026-22947 HIGH

Execution with Unnecessary Privileges (CWE-250)

2026-04-15 hp

GHSA-f7xm-7w7h-hhcm

Privilege Escalation HP Omen Gaming Hub Hp Inc

7.3

CVSS 4.0 · Vendor: hp

View

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain

Access

Obtain interactive local user session
Exploit

Abuse unnecessarily elevated Omen Gaming Hub service
Execution

Escalate privileges to SYSTEM
Impact

Full system compromise (install malware, modify data, maintain persistence).

Vulnerability Assessment

Weakness	CWE CWE-250 ASVS 5.0 V8 - Authorization Unnecessary privilege execution
Exploitation Conditions	A local Windows user with standard privileges must be able to interact with the system running HP Omen Gaming Hub version earlier than 1101.2603. The affected service runs with SYSTEM-level privileges by default; no special configuration or user interaction beyond normal local access is required. The attack is not remotely exploitable.
Impact	The CVSS 4.0 base score of 7.3 reflects attack vector Local (AV:L), low attack complexity (AC:L), a required attack technique (AT:P), low privileges (PR:L), no user interaction (UI:N), and high impact on confidentiality, integrity, and availability (VC/VI/VA:H, no scope change). EPSS probability is 0.01% (3rd percentile), suggesting minimal real-world exploitation activity. CISA SSVC decision parameters indicate no active exploitation and non-automatable exploitation, yet total technical impact. While the vulnerability is theoretically severe, the local attack vector, low exploitation probability, and non-automatability reduce the urgency compared to remotely exploitable flaws. The existence of a publicly available Nuclei template (exploit code) confirms the issue is reproducible but does not change the overall low active risk.
Exploit ScenarioDerived	An attacker with a standard local user account on a Windows machine runs HP Omen Gaming Hub. Using publicly available exploit techniques (e.g., the Nuclei detection template), the attacker manipulates the vulnerable service to execute arbitrary code as SYSTEM, gaining full control over the system.

This Week Schedule remediation this week. Why: HIGH severity (CVSS 7.0-8.9).

Patch available 0.0% exploitation probability (EPSS)

Get an e-mail when this CVE is exploited, patched or re-scored. Free account.

Alert me

AnalysisAIv1 – Jul 27, 2026

Local privilege escalation in HP Omen Gaming Hub versions prior to 1101.2603 allows a low-privileged local attacker to execute arbitrary code with SYSTEM privileges. A public proof-of-concept detection template exists, but no active exploitation has been reported. The vulnerability is rated High severity with an EPSS of 0.01%, indicating low near-term exploitation probability.

RemediationAI

Upgrade HP Omen Gaming Hub to version 1101.2603 or later, as detailed in HP advisory HPSBGN04101. No official workaround is documented. If immediate patching is not possible, consider uninstalling the software or strictly controlling interactive local user access until the update can be applied. Note that uninstalling the hub may remove gaming-specific performance and lighting management features.

Affected VersionsENISA

Omen Gaming Hub 0 <<1101.2603

Affected Packages

euvd omen_gaming_hub_0 fix: 1101.2603

Source: OSV (Open Source Vulnerabilities)

Affects your stack

Affects 1 package in euvd

Checking this CVE against your own stacks and servers is part of the Basic plan and up.

Technical ContextAI · show details

The vulnerability is classified as CWE-250: Execution with Unnecessary Privileges. HP Omen Gaming Hub, identified by CPE cpe:2.3:a:hp_inc.:omen_gaming_hub, includes a component (likely a background service or agent) that runs with elevated SYSTEM rights. A local authenticated user can leverage this overly privileged process to execute arbitrary operations outside the intended user context, leading to full system compromise. The vendor advisory (HP HPSBGN04101) confirms the flaw and provides a patched version.

Know when Omen Gaming Hub gets its next vulnerability

Watch products and get an email when something new is published
Check this CVE against your own stack and servers
Exploit and PoC references, threat intelligence from 22 sources

Continue with Google Continue with GitHub

No credit card · 7-day full trial

Severity by source

Vendor (hp) PRIMARY 7.3 HIGH

CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

vuln.today AI 7.8 HIGH

Local attack requires only low privileges and no user interaction, leading to total system impact.

3.1 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

4.0 AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (hp).

CVSS VectorVendor: hp

Attack Vector

Local

Attack Complexity

Low

Attack Requirements

Present

Privileges Required

Low

User Interaction

None

Vulnerable system: Confidentiality

High

Vulnerable system: Integrity

High

Vulnerable system: Availability

High

Subsequent system: Confidentiality

None

Subsequent system: Integrity

None

Subsequent system: Availability

None

Lifecycle Timeline

Patch released

Apr 17, 2026 - 15:09 nvd

Patch available

Apr 16, 2026 - 05:29 EUVD

1101.2603

CVSS changed

Apr 15, 2026 - 15:22 NVD

7.3 (HIGH)

CVE Published

Apr 15, 2026 - 14:22 nvd

HIGH 7.3

DescriptionCVE.org

HP System Optimizer might potentially be vulnerable to escalation of privilege. HP is releasing an update to mitigate this potential vulnerability.

Threat Intelligence Overview

EPSS Score

0.0%

Top 97% exploitable

Prevalence

Medium

pre-installed on many HP Omen gaming laptops and desktops

Data Quality

7 sources

Confidence: High

EUVD

NVD

CVE.org

EPSS

Vulnrichment

GitHub

VulDB Nuclei

How this decision was reached

The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.

SignalValue

Severity HIGH

CISA KEV No

Public POC No

EPSS 0.0%

Patch available Yes

Active threat No

Deciding rule

HIGH severity (CVSS 7.0-8.9)

What every action level means

Emergency Immediate action required. Criteria: CRITICAL + in CISA KEV (actively exploited) without patch, OR CRITICAL + EPSS > 30% without patch, OR CRITICAL + active threat signals without patch.

Act Now Prioritize within 24-48h. Criteria: in KEV with patch available, OR CRITICAL + public POC, OR HIGH + EPSS > 10%, OR CRITICAL + active threat, OR any CRITICAL severity.

This Week Schedule remediation this week. Criteria: HIGH severity (CVSS 7.0-8.9). Patch within normal change window.

This Month Plan within 30 days. Criteria: MEDIUM severity (CVSS 4.0-6.9), lower exploitation probability. Include in regular patch cycle.

Monitor Track and reassess. Criteria: LOW severity (CVSS 0.1-3.9), minimal exploitation risk. No immediate action needed.

SSVC AssessmentENISA

SSVC Decision· derived

Scheduled

Exploitation

None

System Exposure· derived

Small

Automatable

Human Impact· derived

Medium

Technical Impact

Total

Priority Score

Low Medium High Critical

KEV: 0

EPSS: 0

CVSS: +36

PoC: 0

Weaponized: 0

Threat intel: 0

Gov advisory: 0

Attack Technique

Privilege Escalation HIGH

Privilege escalation occurs when an attacker leverages flaws in access control mechanisms to gain permissions beyond what they were originally granted.