CVE-2026-76719
Received Received - Intake

HPE OneView Session Hijacking Vulnerability

Publication date: 2026-09-29

Last updated on: 2026-09-29

Assigner: Hewlett Packard Enterprise (HPE)

Description
A security vulnerability in HPE OneView may be exploited remotely to perform session hijacking, data theft or other unauthorized actions.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-29
Last Modified
2026-09-29
Generated
2026-09-29
AI Q&A
2026-09-29
EPSS Evaluated
N/A
NVD
CVE-2026-76719
EUVD
EUVD-2026-88698

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
hpe oneview *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-79 The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in HPE OneView allows remote attackers to hijack user sessions, steal data, or perform unauthorized actions. It is classified as a session hijacking issue with potential for data theft.

Impact Analysis

If exploited, this vulnerability could lead to unauthorized access to sensitive data, session hijacking, or other malicious actions on systems managed by HPE OneView. The impact depends on the privileges of the hijacked session.

Compliance Impact

The vulnerability allows remote session hijacking and data theft, which could lead to unauthorized access to sensitive data. This may violate compliance requirements under GDPR (data protection) and HIPAA (healthcare data security) by exposing personal or protected health information.

Mitigation Strategies

Update HPE OneView to the latest patched version immediately to address the session hijacking risk. Monitor network traffic for unusual sessions or data transfers. Restrict access to HPE OneView interfaces to trusted networks only.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-76719. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart