Authentication Bypass Vulnerability in HPE Performance Cluster Manager GUI
CVE-2025-27086
8.1HIGH
Key Information:
- Vendor
HP
- Vendor
- CVE Published:
- 21 April 2025
What is CVE-2025-27086?
A vulnerability in the HPE Performance Cluster Manager (HPCM) GUI allows attackers to potentially bypass authentication mechanisms, posing a significant security risk. This flaw can lead to unauthorized access and manipulation of system configurations, and users are encouraged to implement security updates and patches to mitigate the risk.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
HPE Performance Cluster Manager (HPCM) 0
References
CVSS V3.1
Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved