CVE-2026-79880: Vulnerability in Hewlett Packard Enterprise (HPE) Unknown product

CVE-2026-79880 is a vulnerability in an unknown HPE product affecting versions >=8.10.0.0 <=8.10.0.23 and >=8.12.0.0 <=8.13.3.0. The CVSS 3.1 vector (AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:H) indicates that the vulnerability can be exploited remotely over the network with low complexity but requires high privileges. It causes a complete impact on integrity and availability, while confidentiality is not affected. The scope is changed, meaning the vulnerability affects resources beyond the initially vulnerable component. No public exploits or vendor patches are currently documented.

The vulnerability allows an attacker with high privileges to remotely compromise the integrity and availability of the affected system, potentially causing significant disruption or unauthorized modification of system components. Confidentiality is not impacted. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no vendor advisory or patch links are provided, users should monitor Hewlett Packard Enterprise communications for updates and apply official fixes once available. Until then, restrict high-privilege access and follow standard security practices to limit exposure.