CVE-2026-19915
Received Received - Intake

Privilege Escalation in HP Support Assistant

Publication date: 2026-09-22

Last updated on: 2026-09-22

Assigner: HP Inc.

Description
A potential security vulnerability has been identified in the HP Support Assistant for versions prior to 9.55.10.0. The vulnerability could potentially allow a local attacker to escalate privileges due to insufficient access controls.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-22
Last Modified
2026-09-22
Generated
2026-09-22
AI Q&A
2026-09-22
EPSS Evaluated
N/A
NVD
CVE-2026-19915
EUVD
EUVD-2026-84500

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
hp hp_support_assistant to 9.55.10.0 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-269 The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is in HP Support Assistant versions before 9.55.10.0. It allows a local attacker to escalate privileges due to weak access controls, meaning an attacker with local access could gain higher system permissions.

Impact Analysis

If exploited, this vulnerability could let an attacker with local access take control of your system, install malware, steal data, or perform other malicious actions with elevated privileges.

Mitigation Strategies

Update HP Support Assistant to version 9.55.10.0 or later to address the insufficient access controls that could allow privilege escalation.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-19915. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart