CVE-2026-2915

Received Received - Intake

Arbitrary File Write Vulnerability in HP System Event Utility

Publication date: 2026-03-03

Last updated on: 2026-03-09

Assigner: HP Inc.

Description

HP System Event Utility might allow denial of service with elevated arbitrary file writes. This potential vulnerability was remediated with HP System Event Utility version 3.2.16.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-03-03

Last Modified

2026-03-09

Generated

2026-07-06

AI Q&A

2026-03-03

EPSS Evaluated

2026-07-05

NVD

CVE-2026-2915

EUVD

EUVD-2026-9316

Affected Vendors & Products

Vendor	Product	Version / Range
hp	system_event_utility	to 3.2.16 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-732	The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.
CWE-276	During installation, installed file permissions are set to allow anyone to modify those files.

Attack-Flow Graph

Executive Summary

The vulnerability in HP System Event Utility might allow a denial of service through elevated arbitrary file writes. This means that an attacker with limited privileges could potentially write files in a way that disrupts the normal operation of the system or application.

This issue was fixed in HP System Event Utility version 3.2.16.

Impact Analysis

This vulnerability can impact you by causing a denial of service condition, which may interrupt or degrade the availability of the affected system or service.

Because it involves elevated arbitrary file writes, it could also potentially allow an attacker to modify or replace files, leading to further security risks or system instability.

Compliance Impact

I don't know

Detection Guidance

I don't know

Mitigation Strategies

To mitigate this vulnerability, update the HP System Event Utility to version 3.2.16 or later, as this version contains the fix for the issue.

Hi! I’m here to help you understand CVE-2026-2915. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70