CVE-2026-79875: Vulnerability in Hewlett Packard Enterprise (HPE) Unknown product

CVE-2026-79875 is a critical vulnerability in an unspecified Hewlett Packard Enterprise product affecting versions >=8.10.0.0 <=8.10.0.23 and >=8.12.0.0 <=8.13.3.0. The vulnerability has a CVSS 3.1 score of 9.3 with an attack vector over the network, low attack complexity, no privileges or user interaction required, and results in a scope change with high confidentiality and integrity impact but no availability impact. The lack of a detailed description or vendor advisory limits further technical analysis. No patch or mitigation details are currently available, and no known exploits have been reported.

The vulnerability allows an unauthenticated attacker to remotely compromise confidentiality and integrity of the affected system without requiring user interaction or privileges. The scope change indicates that the vulnerability affects components beyond the initially vulnerable component. There is no impact on availability. The critical CVSS score reflects the severity of potential data compromise or unauthorized data modification.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or workaround information is available at this time. Monitor Hewlett Packard Enterprise advisories for updates and apply patches promptly once available.