CVE-2026-79871: Vulnerability in Hewlett Packard Enterprise (HPE) Unknown product

CVE-2026-79871 is a critical remote vulnerability in an unspecified HPE product, impacting versions >=10.3.0.0 <=10.4.1.13, >=10.6.0.0 <=10.7.2.6, and >=10.8.0.0 <=10.8.1.1. The CVSS 3.1 vector (AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) indicates an attack vector over adjacent network with low attack complexity, no privileges or user interaction required, and a scope change leading to complete compromise of confidentiality, integrity, and availability. The vulnerability is published but lacks detailed description, vendor advisory, or patch information. No known exploits in the wild have been reported.

Successful exploitation of this vulnerability could lead to full compromise of the affected system's confidentiality, integrity, and availability. The attacker can remotely execute actions without authentication or user interaction, potentially leading to complete system takeover or data breach. The scope change in the CVSS vector suggests the vulnerability affects components beyond the initially vulnerable part, increasing the severity of impact.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, organizations should monitor Hewlett Packard Enterprise communications for updates. Until a fix is available, consider limiting network exposure of affected versions and applying any recommended temporary mitigations from the vendor once available.