EUVD-2026-108400
GHSA-2695-2743-7g6p
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessObtain high-privilege account on device
-
ExploitSend crafted request over network
-
ExecutionExploit vulnerable component
-
ImpactFull compromise of confidentiality, integrity and availability
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A05:2025 - Injection
ASVS 5.0
V1 - Encoding and Sanitization Command injection prevention
MITRE ATT&CK
1 technique across 1 tactic: Execution The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Exploitation Conditions | Exploitation requires an attacker to already possess high privileges on the affected HPE networking product (CVSS PR:H) and network reachability to it (AV:N); no user interaction is needed (UI:N) and attack complexity is low (AC:L). The high-privilege requirement is the primary limiting factor, confining exploitation to administrators or attackers who have already obtained privileged credentials. The exact product feature, protocol, or configuration that triggers the flaw is not described in the available sources (no description or CWE provided), so the precise preconditions cannot be stated and must be confirmed from HPE advisory hpesbnw05162en_us. |
| Impact | Signals are mixed and the dataset is thin. The CVSS 3.1 vector (AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H, base 7.2 High) describes a network-reachable, low-complexity flaw requiring high privileges that yields full confidentiality, integrity, and availability loss on the vulnerable component. The vuln.today decision label is 'this_week', indicating elevated but not emergency urgency. There is no CISA KEV listing, no EPSS probability supplied, and no PoC or exploit reference in the input, so exploitation likelihood cannot be quantified - this reads as a credential-gated issue rather than a mass-exploitable internet threat. Two inconsistencies must be verified before prioritization: (1) the single 'Information Disclosure' tag conflicts with the CVSS vector's full integrity and availability impact (I:H/A:H), so the tag likely understates the actual impact - verify with the HPE advisory; and (2) no description, CWE, affected product, or version data is present, so the mechanism and scope are unknown. PR:H means an attacker already needs high-privilege access, which materially lowers real-world risk versus an unauthenticated flaw; treat as a near-term patching item for the affected HPE networking product rather than a drop-everything emergency. |
| Exploit ScenarioDerived | An attacker who already holds high-privilege (administrative) access to the affected HPE networking product sends crafted input over the network to the vulnerable component, with no user interaction and low attack complexity, to compromise confidentiality, integrity, and availability. No public exploit code is referenced in the available data, and the specific trigger is not described in the sources. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Oct 22, 2026
Unauthenticated network reachability combined with existing high privileges on an affected HPE networking product can be leveraged to fully compromise confidentiality, integrity and availability (CVSS 7.2, AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H). The high-privilege prerequisite (PR:H) is the primary limiting factor, so exposure is confined to administrators and to attackers who have already obtained privileged credentials; no user interaction is required and attack complexity is low once that access exists. The dataset is thin - no CVE description, no CWE and no CPE data were supplied, the trigger condition is not described in the available sources, and no public exploit has been identified at time of analysis (no KEV listing, no PoC reference). Priority is 'this_week' per the vuln.today decision label.
RemediationAI
No vendor-released patch or fixed version is identified in the available data, and no workaround is stated in the supplied sources; the authoritative source for both is HPE security bulletin hpesbnw05162en_us (https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05162en_us&docLocale=en_US), which should be checked for fixed firmware per model and branch before any version number is quoted internally. Because the assessed vector requires high privileges on the target (PR:H) with network reachability (AV:N), the effective interim exposure control is to restrict administrative and other privileged access paths to the device's management plane to trusted networks and named administrator accounts, and to review privileged accounts for signs of prior compromise - the trade-off being reduced operational flexibility for remote administration. Treat the absence of a listed fix as a data gap rather than confirmation that no patch exists, and re-check the advisory before scheduling upgrades.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 1 package in euvd
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
No CWE was provided, so the root-cause class cannot be attributed from the available data, and the exact product feature, protocol or configuration that triggers the flaw is likewise not described in the sources; the trigger must be confirmed from HPE advisory hpesbnw05162en_us. What the assessed CVSS vector does establish is the exploitation envelope: AV:N means the flaw is reachable over the network rather than requiring local or physical access, AC:L means no specialised conditions or attack complexity are needed beyond the stated prerequisites, PR:H means the attacker must already hold high privileges on the device or platform, and UI:N means no victim action is needed. The scope is unchanged (S:U) but all three impact metrics are High (C:H/I:H/A:H), indicating full compromise of confidentiality, integrity and availability of the affected component. There is a notable inconsistency worth flagging: the intake tag classifies this as 'Information Disclosure', whereas the assessed vector scores integrity and availability impact as High as well, so the tag likely understates the blast radius and should not be relied on alone. No CPE strings were supplied, so the precise affected models and firmware branches cannot be enumerated from this dataset.
Know when the next one hits your stack
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
No description is available, so metrics mirror the HPE-supplied vector: network reach, low complexity, high privileges required (PR:H), and full CIA impact on an unchanged scope.
Primary rating from Vendor (hpe).
CVSS VectorVendor: hpe
DescriptionCVE.org
No description provided
Executive ViewAI
A high-severity vulnerability in an unspecified HPE networking product allows an attacker who already holds administrative credentials to completely compromise the confidentiality, integrity, and availability of the affected system. While the privileged-access prerequisite limits the attack surface to administrators, the absence of a vendor patch means that any incidental exposure of administrative credentials-through phishing, credential reuse, or previous compromise-could escalate into a full network device takeover. Leadership should care because network infrastructure compromise can cascade into broader enterprise outages and data loss, and the lack of a fix requires interim controls to manage residual risk.
No vendor-released patch identified at time of analysis. Interim mitigations include restricting administrative access to dedicated management networks, enforcing multi-factor authentication and least-privilege principles for privileged accounts, rotating credentials regularly, segmenting management interfaces from user and external networks, and monitoring for unauthorized administrative activity.
Threat Intelligence Overview
NVD
CVE.org
EPSS
Vulnrichment
VulDB
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
OS command injection occurs when an application passes unsanitized user input directly into system shell commands.
Exploit-DB