EUVD-2026-108389
GHSA-j74h-8x9r-qmq9
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessReach HPE device over network
-
ExploitSend crafted request
-
ExecutionSatisfy high-complexity trigger condition
-
ImpactDisclose data and compromise device
Vulnerability Assessment
| Weakness |
CWE
ASVS 5.0
V15 - Secure Coding and Architecture Bounds checking, buffer size validation
MITRE ATT&CK
2 techniques across 2 tactics: Execution, Privilege Escalation The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Exploitation Conditions | The specific prerequisite is not described in the available sources - there is no CVE description or CWE, only an HPE networking security bulletin reference. The CVSS vector indicates remote network reachability (AV:N) with no authentication (PR:N) and no user interaction (UI:N), but HIGH attack complexity (AC:H), meaning exploitation depends on a condition, timing, or configuration state outside the attacker's control that the sources do not specify. Limiting factors: the AC:H rating itself is the primary realistic brake, and the affected product appears restricted to a particular HPE networking product/version that is not identified here - defenders should consult HPE bulletin hpesbnw05162en_us for the exact affected products, versions, and fixes. |
| Impact | Signals are mixed and the underlying data is thin. The CVSS 3.1 vector (AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H, base 8.1) describes a network-reachable, unauthenticated flaw with full confidentiality, integrity and availability impact but HIGH attack complexity, meaning successful exploitation depends on conditions outside the attacker's direct control. The vuln.today decision label is 'this_week' (a prioritize-but-not-emergency tier), not act_now or emergency. No EPSS score, no CISA KEV listing, and no PoC or exploit reference are present in the input, so there is no evidence of active exploitation or public exploit code - exploitation probability cannot be quantified from this data. Note a signal conflict: the sole tag is 'Information Disclosure', yet the CVSS vector claims I:H and A:H, implying integrity and availability damage beyond mere disclosure - one of these characterizations is incomplete and should be verified against the HPE bulletin. The AC:H rating is the main real-world brake: this is a credible network-facing enterprise-gear issue worth patching on a normal priority cycle, not a drop-everything emergency, and the absence of a description or CWE means the precise mechanism is unverified. |
| Exploit ScenarioDerived | A remote, unauthenticated attacker with network reachability to an affected HPE networking product sends a specially constructed request to trigger the flaw, which the CVSS vector rates as high-complexity (AC:H) - so success likely depends on winning a specific condition, timing window, or configuration state that the available sources do not describe. If triggered, the result is disclosure of sensitive data and potential compromise of integrity and availability on the device. No public exploit identified at time of analysis. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Oct 22, 2026
An 8.1-severity remote flaw (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) affects an HPE networking product identified only through HPE security bulletin hpesbnw05162en_us; the specific product and version ranges are not present in the supplied data. Scoring combines full impact on confidentiality, integrity and availability with network reachability, no privileges and no user interaction, but high attack complexity means a condition outside the attacker's control must hold before exploitation succeeds, and that prerequisite is not described in any available source. No public exploit code and no confirmed active exploitation (CISA KEV) are associated with this record, and the only cited reference is the HPE bulletin itself; the vuln.today triage label is this_week, so this should be scheduled within the current patch cycle rather than treated as an emergency. Note the supplied tag reads "Information Disclosure" while the assessed vector claims high integrity and availability impact - that discrepancy is unresolved in the available data.
RemediationAI
No vendor-released patch is identified in the available data, and no fixed version number can be cited - the sole actionable source is HPE security bulletin hpesbnw05162en_us (https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05162en_us&docLocale=en_US), which must be consulted to determine the affected product models, firmware branches, fixed releases and any vendor-stated workarounds before remediation can be planned. Because the assessed vector is network-reachable with no authentication and no user interaction, the practical interim control is to reduce reachability of the affected management or service interface - restrict it to a dedicated administrative network segment or VPN, and filter it at the perimeter - accepting the operational trade-off that legitimate administrators lose direct access and must route through the jump path; do not disable the interface wholesale on production network devices without confirming with the vendor that doing so leaves the device functional. Track the record for a patch reference, re-score once the bulletin text is parsed, and schedule remediation within the current week per the this_week triage label rather than treating it as an emergency, since neither KEV listing nor verified working exploit code has been reported.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 1 package in euvd
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
No CWE is assigned in the supplied data and no description exists, so the root-cause class (memory corruption, logic error, authentication bypass, parser flaw, etc.) cannot be determined from the sources; the trigger is not described. What is known comes entirely from the CVSS vector: AV:N places the attack surface on the network, PR:N and UI:N mean no credentials and no victim interaction are required, S:U means the impact stays within the vulnerable component, and C:H/I:H/A:H indicate a worst-case outcome across confidentiality, integrity and availability - potentially full compromise of the device rather than a read-only leak. AC:H is the single meaningful brake and implies a non-trivial precondition the attacker cannot fully influence, but the sources do not state what that condition is, so any claim about timing windows, race conditions or specific configuration states would be speculation. The reporting address (security-alert@hpe.com) and the docId pattern hpesbnw05162en_us point to an HPE networking security bulletin as the authoritative technical disclosure; no CPE identifiers were supplied, so the affected platform must be established from that bulletin. The product_name and impact framing here are deliberately generic because the underlying record is thin.
Know when Hpe gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
No description to independently re-derive metrics, so the vector mirrors the supplied vendor/NVD vector: network-reachable, unauthenticated, high-complexity, full unscoped CIA impact.
Primary rating from Vendor (hpe).
CVSS VectorVendor: hpe
DescriptionCVE.org
No description provided
Executive ViewAI
A high-severity (CVSS 8.1) network-accessible vulnerability affects an as-yet-unspecified HPE networking product, per HPE bulletin hpesbnw05162en_us, with the potential to compromise confidentiality, integrity, and availability of affected infrastructure. Because the affected product, version ranges, and exploitation prerequisites are not yet identified, security leadership should prioritize scoping the exposure of HPE networking assets across the estate. No public exploit code or confirmed active exploitation has been identified, and the issue is scheduled within the current patch cycle rather than as an emergency.
No vendor-released patch identified at time of analysis; interim mitigations include restricting network access to affected HPE networking devices, isolating management interfaces to trusted administrative networks, and monitoring for anomalous activity pending vendor guidance in hpesbnw05162en_us.
Threat Intelligence Overview
NVD
CVE.org
EPSS
Vulnrichment
VulDB
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
A buffer overflow occurs when a program writes more data to a memory buffer than it was allocated to hold, causing the excess data to spill into adjacent memory regions.
An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs: Intel Active Mana
The read_mru_list function in NTP before 4.2.8p9 allows remote attackers to cause a denial of service (crash) via a craf
Default, hard-coded credentials shipped on several administrative and system accounts in HPE's Analytics and Location En
A directory traversal vulnerability in Hewlett Packard Enterprise Insight Remote Support may allow remote code execution
A potential security vulnerability has been identified in Hewlett Packard Enterprise OfficeConnect 1820, 1850, and 1920S
A security vulnerability in HPE Smart Update Manager (SUM) prior to version 8.5.6 could allow remote unauthorized access
A vulnerability in HPE Insight Remote Support (IRS) prior to v7.15.0.646 may allow an unauthenticated denial of service
NTP through 4.2.8p12 has a NULL Pointer Dereference. Rated high severity (CVSS 7.5), this vulnerability is remotely expl
A maximum-severity, network-reachable flaw (CVSS 3.1 base 10.0) in an as-yet-unnamed HPE product allows remote attackers
Unauthenticated network attackers can potentially achieve high confidentiality, integrity, and availability impact again
HPE security bulletin hpesbnw05162en_us documents a maximum-severity (CVSS 10.0) exposure in an HPE product that is not
HPE advisory hpesbnw05162en_us covers a product flaw carrying a CVSS 3.1 base score of 10.0 (AV:N/AC:L/PR:N/UI:N/S:C/C:H
Exploit-DB