CVE-2026-73763

Received Received - Intake

Unauthenticated Command Execution in HPE Management Utility

Publication date: 2026-09-01

Last updated on: 2026-09-01

Assigner: Hewlett Packard Enterprise (HPE)

Description

A vulnerability exists in a management component that could allow an unauthenticated adjacent attacker to execute arbitrary commands. Successful exploitation could result in remote execution of arbitrary commands in the context of the affected utility.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-01

Last Modified

2026-09-01

Generated

2026-09-02

AI Q&A

2026-09-02

EPSS Evaluated

N/A

NVD

CVE-2026-73763

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability is in a management component that allows an unauthenticated attacker within close network proximity to execute arbitrary commands. If exploited, it could lead to remote command execution with the privileges of the affected utility.

Impact Analysis

An attacker could gain control over the affected system, potentially stealing data, installing malware, or disrupting services. The impact depends on the system's role and the commands executed.

Compliance Impact

This vulnerability could lead to unauthorized access, data breaches, or loss of sensitive information, which may violate compliance requirements such as GDPR or HIPAA. Organizations must address it to maintain regulatory adherence.

Mitigation Strategies

Isolate affected systems, apply vendor patches if available, restrict network access to the management component, and monitor for unusual command execution activity.

Hi! I’m here to help you understand CVE-2026-73763. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70