EUVD-2026-108352
GHSA-v496-p467-87fq
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessReach exposed HPE networking service over network
-
ExploitSend crafted unauthenticated request
-
ExecutionTrigger remote vulnerability
-
ImpactCompromise confidentiality, integrity and availability
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A05:2025 - Injection
ASVS 5.0
V1 - Encoding and Sanitization Parameterized queries, prepared statements
MITRE ATT&CK
2 techniques across 2 tactics: Initial Access, Persistence The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Exploitation Conditions | The CVSS vector (AV:N/AC:L/PR:N/UI:N) indicates no special conditions - remote, unauthenticated, no-user-interaction exploitation against the affected HPE networking product. However, the exact feature, protocol, service, or deployment mode that must be exposed is not described in the available sources (no description or CWE was provided), so the concrete prerequisite cannot be named from this data. The primary limiting factor per the vector is network reachability to the vulnerable service; whether that service is enabled by default or exposed to untrusted networks must be confirmed from the HPE advisory. Affected product versions are not provided and must be obtained from HPE bulletin hpesbnw05162en_us. |
| Impact | The provided CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, base 9.8) describes a remote, low-complexity, unauthenticated flaw with full confidentiality, integrity, and availability impact - the most severe possible network-exploitable profile. The vuln.today decision label is 'act_now', which is the strongest urgency signal in this dataset and should drive prioritization. However, the supporting evidence is thin and partly conflicting: no description, no CWE, and no EPSS score, KEV listing, SSVC decision breakdown, or PoC reference are provided, so the exploitation-probability and real-world-exploitation dimensions cannot be assessed independently. There is a material conflict between the single tag 'Information Disclosure' (which implies a confidentiality-only issue) and the CVSS vector's C:H/I:H/A:H (which claims full compromise including integrity and availability) - these cannot both be fully accurate, and the discrepancy should be verified against the HPE advisory. Net: treat as high-priority based on the 9.8 score and act_now label, but recognize that the actual mechanism, affected product/versions, and exploitation likelihood are not confirmed by the available data. |
| Exploit ScenarioDerived | A remote attacker with network reachability to the affected HPE networking product sends a crafted request to the vulnerable service and, per the CVSS vector, achieves exploitation without authentication or user interaction, resulting in full compromise of the system. The specific trigger and affected feature are not described in the available sources, and no public exploit code or PoC reference is provided in the input. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Oct 22, 2026
Remote, unauthenticated attackers can achieve full confidentiality, integrity, and availability impact against an affected HPE networking product, per a CVSS 3.1 base score of 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). The specific vulnerable component, protocol, and affected version range are not described in the available sources; HPE published only a support bulletin (hpesbnw05162en_us) and no CVE description or CWE mapping was supplied, and the record carries an Information Disclosure tag that is difficult to reconcile with the full impact triad. No CISA KEV listing, no public exploit code, and no EPSS score were provided, but the vuln.today priority decision is act_now, so treat exposure as urgent pending confirmation from the HPE bulletin.
RemediationAI
No vendor-released patch version is given in the available data; the HPE support bulletin hpesbnw05162en_us (https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05162en_us&docLocale=en_US) is the authoritative source for fixed firmware builds and must be consulted to identify the exact update for each affected platform. Because the rated vector is network-reachable, unauthenticated, and requires no user interaction, interim risk reduction should focus on reducing reachability of the vulnerable service until the fixed build is applied: restrict management and service interfaces to trusted administrative networks via ACLs or firewall rules, and disable any internet-facing exposure of the device, accepting that this limits remote management convenience. Avoid drawing on generic hardening steps, since the vendor bulletin - not this data - defines what is actually affected and what update resolves it.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 1 package in euvd
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
The record covers an unspecified HPE networking product and provides no CWE classification, so the root-cause class (for example an exposed management interface, unsafe deserialization, or improper access control) cannot be determined from the available sources. What is confirmed is the CVSS 3.1 vector: network attack vector, low attack complexity, no privileges required, no user interaction, scope unchanged, and high impact across confidentiality, integrity, and availability. That profile means the flaw is reachable over the network without credentials and without tricking a user, and that a successful exploit can read, alter, and disrupt the affected system. The supplied tag, Information Disclosure, suggests data exposure is at least part of the impact, but it does not explain the rated integrity and availability effects, so the full mechanism remains unverified. Whether the vulnerable service is enabled by default, which deployment modes (appliance, controller, gateway, or software image) are affected, and which firmware branches contain the fix must all be established from HPE bulletin hpesbnw05162en_us.
Know when Hpe gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Primary rating from Vendor (hpe) · only source for this CVE.
CVSS VectorVendor: hpe
DescriptionCVE.org
No description provided
Executive ViewAI
HPE networking products contain a critical remote unauthenticated vulnerability (CVE-2026-79852) that could allow attackers to fully compromise confidentiality, integrity, and availability of affected devices. With a CVSS score of 9.8 and no patch available, this poses a severe risk to network infrastructure reliability and data protection, requiring immediate leadership attention and mitigation planning.
No vendor-released patch identified at time of analysis. Interim mitigations include network segmentation, firewall rules to restrict access, continuous monitoring for exploitation attempts, and limiting administrative access to trusted networks.
Threat Intelligence Overview
NVD
CVE.org
EPSS
Vulnrichment
VulDB
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
SQL injection exploits the way applications construct database queries by mixing user input directly into SQL statements.
An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs: Intel Active Mana
The read_mru_list function in NTP before 4.2.8p9 allows remote attackers to cause a denial of service (crash) via a craf
Default, hard-coded credentials shipped on several administrative and system accounts in HPE's Analytics and Location En
A directory traversal vulnerability in Hewlett Packard Enterprise Insight Remote Support may allow remote code execution
A potential security vulnerability has been identified in Hewlett Packard Enterprise OfficeConnect 1820, 1850, and 1920S
A security vulnerability in HPE Smart Update Manager (SUM) prior to version 8.5.6 could allow remote unauthorized access
A vulnerability in HPE Insight Remote Support (IRS) prior to v7.15.0.646 may allow an unauthenticated denial of service
NTP through 4.2.8p12 has a NULL Pointer Dereference. Rated high severity (CVSS 7.5), this vulnerability is remotely expl
A maximum-severity, network-reachable flaw (CVSS 3.1 base 10.0) in an as-yet-unnamed HPE product allows remote attackers
Unauthenticated network attackers can potentially achieve high confidentiality, integrity, and availability impact again
HPE security bulletin hpesbnw05162en_us documents a maximum-severity (CVSS 10.0) exposure in an HPE product that is not
HPE advisory hpesbnw05162en_us covers a product flaw carrying a CVSS 3.1 base score of 10.0 (AV:N/AC:L/PR:N/UI:N/S:C/C:H
Exploit-DB