{"id":"CVE-2026-76740","aliases":["EUVD-2026-104091","GHSA-26cw-6v5q-3r99"],"status":"published","title":"HPE Compute Scale-up Server 3200 and 3250 platforms, Superdome Flex and Superdome Flex 280 servers, Remote Command Execution vulnerability","description":"A security vulnerability in HPE Compute Scale-up Server 3200 and 3250 platforms, Superdome Flex and Superdome Flex 280 servers could be exploited remotely to execute arbitrary commands on the RMC.","severity":{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00484,"percentile":0.42,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-78"],"published":"2026-10-19T06:25:55Z","modified":"2026-10-21T04:18:10Z","products":[{"vendor":"hewlett packard enterprise","product":"hpe compute scale-up server 3200 platform"},{"vendor":"hewlett packard enterprise","product":"hpe compute scale-up server 3250 platform"},{"vendor":"hewlett packard enterprise","product":"hpe superdome flex 280 server"},{"vendor":"hewlett packard enterprise","product":"hpe superdome flex server"},{"vendor":"hpe","product":"hpe superdome flex server"}],"references":[{"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbhf05153en_us\u0026docLocale=en_US","tags":["vendor-advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-76740"},{"url":"https://github.com/advisories/GHSA-26cw-6v5q-3r99"}],"sources":{"cve":[{"id":"CVE-2026-76740","title":"HPE Compute Scale-up Server 3200 and 3250 platforms, Superdome Flex and Superdome Flex 280 servers, Remote Command Execution vulnerability","description":"A security vulnerability in HPE Compute Scale-up Server 3200 and 3250 platforms, Superdome Flex and Superdome Flex 280 servers could be exploited remotely to execute arbitrary commands on the RMC.","status":"published","published":"2026-10-19T06:25:55.088Z","modified":"2026-10-21T03:56:22.565Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T13:46:32.755125Z"}],"euvd":[{"id":"EUVD-2026-104091","description":"A security vulnerability in HPE Compute Scale-up Server 3200 and 3250 platforms, Superdome Flex and Superdome Flex 280 servers could be exploited remotely to execute arbitrary commands on the RMC.","status":"published","published":"2026-10-19T06:25:55Z","modified":"2026-10-21T03:56:22Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T16:59:40.539547Z"}],"ghsa":[{"id":"GHSA-26cw-6v5q-3r99","title":"A security vulnerability in HPE Compute Scale-up Server 3200 and 3250 platforms, Superdome Flex...","description":"A security vulnerability in HPE Compute Scale-up Server 3200 and 3250 platforms, Superdome Flex and Superdome Flex 280 servers could be exploited remotely to execute arbitrary commands on the RMC.","status":"published","published":"2026-10-19T09:32:30Z","modified":"2026-10-19T09:32:37Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T15:13:56.45986Z"}],"nvd":[{"id":"CVE-2026-76740","description":"A security vulnerability in HPE Compute Scale-up Server 3200 and 3250 platforms, Superdome Flex and Superdome Flex 280 servers could be exploited remotely to execute arbitrary commands on the RMC.","status":"published","published":"2026-10-19T07:16:31.9Z","modified":"2026-10-21T04:18:10.797Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:13:00.83844Z"}]}}