anonhaven

CVE-2026-79820

CRITICAL CVSS 3.1: 9.0 EPSS 0.27%
Updated Oct 06, 2026
Hewlett Packard Enterprise (Hpe)
Parameter Value
CVSS 9.0 (CRITICAL)
Type CWE-287 (Improper Authentication)
Vendor Hewlett Packard Enterprise (Hpe)
Public PoC No

A remote user validation failure vulnerability exists in HPE Integrated Lights-Out (iLO) 7 firmware.

Attack Parameters

Attack Vector
Network
Can be exploited remotely
Attack Complexity
High
Difficult to exploit
Privileges Required
None
No privileges needed
User Interaction
None
No user interaction needed

Impact Assessment

Confidentiality
High
Complete data leak
Integrity
High
Complete data modification
Availability
High
Complete denial of service

CVSS Vector v3.1

Weakness Type (CWE)

CWE-287 Improper Authentication

Vulnerable Products

hewlett packard enterprise (hpe):hpe integrated lights-out (ilo) 7

References 1

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbhf05163en_us&docLoca…
NVD
Share Post Share Share Share

Related Vulnerabilities

CVE-2026-79818

Hewlett Packard Enterprise (Hpe)

5.3

CVE-2026-79817

Hewlett Packard Enterprise (Hpe)

5.5

CVE-2026-79816

Hewlett Packard Enterprise (Hpe)

6.3

CVE-2026-79815

Hewlett Packard Enterprise (Hpe)

6.5

CVE-2026-79814

Hewlett Packard Enterprise (Hpe)

6.7