CVE-2026-76740

HPE Compute Scale-up Server 3200 and 3250 platforms, Superdome Flex and Superdome Flex 280 servers, Remote Command Execution vulnerability

State: Published
Severity: 7.2 High
Published: Oct 19, 2026
Updated: Oct 21, 2026
Reserved: Aug 19, 2026

Read the record on cve.org

Description

A security vulnerability in HPE Compute Scale-up Server 3200 and 3250 platforms, Superdome Flex and Superdome Flex 280 servers could be exploited remotely to execute arbitrary commands on the RMC.

Scores

CVSS	Score	Vector	Source
3.1	7.2 High	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H	hpe

Weaknesses

CWE-78 Improper neutralization of special elements used in an OS command ('OS command injection')

Affected Products

Product	Versions
HPE Compute Scale-up Server 3200 platformHewlett Packard Enterprise	before 1.77.30Affected
HPE Compute Scale-up Server 3250 platformHewlett Packard Enterprise	before 1.03.38Affected
HPE Superdome Flex serverHewlett Packard Enterprise	before 4.17.03Affected
HPE Superdome Flex 280 serverHewlett Packard Enterprise	before 2.17.03Affected

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbhf05153en_us&docLocale=en_USvendor-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.