CVE-2026-75946: CWE-347 Improper verification of cryptographic signature in HP Inc OMEN Gaming Hub

This vulnerability (CWE-347) in OMEN Gaming Hub arises from improper verification of cryptographic signatures. The flaw could enable a local attacker with limited privileges to escalate their privileges by bypassing insufficient access controls. The affected versions are all releases prior to 1101.2608.0.0. The CVSS 4.0 vector indicates local attack vector, low attack complexity, no user interaction, and high impact on confidentiality and security capabilities. The vulnerability is published and tracked but currently lacks an official fix or vendor advisory detailing remediation.

A local attacker could exploit this vulnerability to escalate privileges on the affected system, potentially gaining unauthorized access or control beyond their initial permissions. The high CVSS score reflects the severity of the impact on confidentiality and system security. However, there are no reports of active exploitation in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should apply standard local security best practices to limit exposure, such as restricting local access to trusted users only. Monitor HP Inc's official channels for updates and patches addressing this vulnerability.