CVE-2026-84900

Received Received - Intake

HP ThinPro Privilege Escalation Vulnerability

Publication date: 2026-10-05

Last updated on: 2026-10-05

Assigner: HP Inc.

Description

Previous versions of HP ThinPro (prior to HP ThinPro 8.1 SP10) could potentially contain security vulnerabilities. HP has released HP ThinPro 8.1 SP10, which includes updates to mitigate potential vulnerabilities. Previous versions of HP ThinPro (prior to HP ThinPro 9 SP3) could potentially contain security vulnerabilities. HP has released HP ThinPro 9 SP3, which includes updates to mitigate potential vulnerabilities.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-05

Last Modified

2026-10-05

Generated

2026-10-06

AI Q&A

2026-10-06

EPSS Evaluated

N/A

NVD

CVE-2026-84900

Affected Vendors & Products

Vendor	Product	Version / Range
HP	Inc	ThinPro 8.1 0
HP	Inc	ThinPro 9 0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-354	The product does not validate or incorrectly validates the integrity check values or "checksums" of a message. This may prevent it from detecting if the data has been modified or corrupted in transmission.

Attack-Flow Graph

Executive Summary

This vulnerability affects HP ThinPro versions prior to 8.1 SP10 and 9 SP3. HP has released updated versions to address potential security issues, but details about the specific vulnerabilities are not provided.

Detection Guidance

To detect this vulnerability, check the installed version of HP ThinPro on your systems. Compare it against the patched versions: HP ThinPro 8.1 SP10 or HP ThinPro 9 SP3. Use commands like 'cat /etc/issue' or 'lsb_release -a' on Linux-based ThinPro systems to verify the version.

Impact Analysis

The impact includes potential security risks due to unpatched vulnerabilities in HP ThinPro versions before 8.1 SP10 and 9 SP3. Users should update to the latest versions to mitigate these risks.

Compliance Impact

The provided CVE data does not specify how this vulnerability affects compliance with standards like GDPR or HIPAA. The description only mentions potential security vulnerabilities in HP ThinPro versions prior to 8.1 SP10 and 9 SP3, with no details on compliance impacts.

Mitigation Strategies

Immediately update HP ThinPro to the latest patched versions: HP ThinPro 8.1 SP10 or HP ThinPro 9 SP3. Download the updates from HP's official support website and apply them to all affected systems as soon as possible.

Hi! I’m here to help you understand CVE-2026-84900. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70