Local Privilege Escalation Vulnerability in HP Support Assistant
CVE-2026-15431

7.3HIGH

Key Information:

Vendor

HP
Status
HP Support Assistant
Vendor
CVE Published:
3 September 2026

What is CVE-2026-15431?

A local privilege escalation vulnerability has been discovered in the HP Support Assistant software. This issue affects versions prior to 9.53.2.0 and can potentially allow an attacker with local access to elevate their privileges, exploiting insufficient access controls within the application. Users are advised to update to the latest version to mitigate the risk associated with this vulnerability.

Affected Version(s)

HP Support Assistant 0 < 9.53.2.0

References

https://support.hp.com/us-en/document/ish_15587742-155877...

CVSS V4

Score:
7.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Zakariaa Hamid
.