Remote URL Redirect Vulnerability in HPE OneView
CVE-2026-76720

4.3MEDIUM

Key Information:

Vendor

HP
Status
HP Oneview
Vendor
CVE Published:
29 September 2026

What is CVE-2026-76720?

A vulnerability in HPE OneView allows remote attackers to exploit URL redirection, potentially leading to phishing attacks and the manipulation of user navigation. This vulnerability facilitates unauthorized redirects that could compromise sensitive information if a user is tricked into visiting a malicious site.

Affected Version(s)

HPE OneView Linux 0

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpe...
vendor-advisory

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.