CVE-2026-7539 is a vulnerability classified under CWE-379 (Creation of temporary file in directory with insecure permissions) affecting the HP Accessory WMI Provider installer used by some HP Docking Stations. This vulnerability could allow an attacker with limited privileges and user interaction to escalate privileges or execute arbitrary code by exploiting insecure temporary file handling. The CVSS 4.0 base score is 7.3, indicating high severity with attack vector local, high attack complexity, and partial user interaction required. HP has announced forthcoming software updates to mitigate this issue but has not yet provided detailed remediation guidance or affected version information.

The vulnerability may allow an attacker with local access and limited privileges to escalate their privileges or execute arbitrary code on affected systems. This could compromise system integrity and security. No known exploits in the wild have been reported to date.

HP is releasing software updates to mitigate this vulnerability. Since no official patch or workaround details are currently provided, users should monitor HP's advisories for updates and apply them promptly once available. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.