{"id":"CVE-2026-76739","aliases":["EUVD-2026-104081","GHSA-4pfr-64r8-wffh"],"status":"published","title":"HPE Compute Scale-up Server 3200 and 3250 platforms and Superdome Flex server, Remote RMC file modification","description":"A potential security vulnerability in HPE Compute Scale-up Server 3200 and 3250 platforms and Superdome Flex server could be remotely exploited to list and modify RMC filesystem.","severity":{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00241,"percentile":0.15367,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-20"],"published":"2026-10-19T05:48:44Z","modified":"2026-10-19T21:13:39Z","products":[{"vendor":"hewlett packard enterprise","product":"hpe compute scale-up server 3200 platform"},{"vendor":"hewlett packard enterprise","product":"hpe compute scale-up server 3250 platform"},{"vendor":"hewlett packard enterprise","product":"hpe superdome flex server"},{"vendor":"hpe","product":"hpe superdome flex server"}],"references":[{"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbhf05154en_us\u0026docLocale=en_US"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-76739"},{"url":"https://github.com/advisories/GHSA-4pfr-64r8-wffh"}],"sources":{"cve":[{"id":"CVE-2026-76739","title":"HPE Compute Scale-up Server 3200 and 3250 platforms and Superdome Flex server, Remote RMC file modification","description":"A potential security vulnerability in HPE Compute Scale-up Server 3200 and 3250 platforms and Superdome Flex server could be remotely exploited to list and modify RMC filesystem.","status":"published","published":"2026-10-19T05:48:44.116Z","modified":"2026-10-19T17:34:41.862Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T13:46:21.568011Z"}],"euvd":[{"id":"EUVD-2026-104081","description":"A potential security vulnerability in HPE Compute Scale-up Server 3200 and 3250 platforms and Superdome Flex server could be remotely exploited to list and modify RMC filesystem.","status":"published","published":"2026-10-19T05:48:44Z","modified":"2026-10-19T17:34:41Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T16:59:50.463489Z"}],"ghsa":[{"id":"GHSA-4pfr-64r8-wffh","title":"A potential security vulnerability in HPE Compute Scale-up Server 3200 and 3250 platforms and...","description":"A potential security vulnerability in HPE Compute Scale-up Server 3200 and 3250 platforms and Superdome Flex server could be remotely exploited to list and modify RMC filesystem.","status":"published","published":"2026-10-19T06:32:24Z","modified":"2026-10-19T06:32:33Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T15:13:56.45986Z"}],"nvd":[{"id":"CVE-2026-76739","description":"A potential security vulnerability in HPE Compute Scale-up Server 3200 and 3250 platforms and Superdome Flex server could be remotely exploited to list and modify RMC filesystem.","status":"published","published":"2026-10-19T06:17:24.73Z","modified":"2026-10-19T21:13:39.973Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:13:00.483792Z"}]}}