Remote Command Execution in HPE Compute Scale-up Servers and Superdome Products
CVE-2026-76740

7.2HIGH

Key Information:

Vendor

HP
Status
HP Compute Scale-up Server 3200 Platform
HP Compute Scale-up Server 3250 Platform
HP Superdome Flex Server
HP Superdome Flex 280 Server
Vendor
CVE Published:
19 October 2026

What is CVE-2026-76740?

A vulnerability exists in the HPE Compute Scale-up Server 3200 and 3250 platforms, as well as the Superdome Flex and Superdome Flex 280 servers, which allows an attacker to execute arbitrary commands remotely on the Remote Management Console (RMC). This issue poses a significant security risk, as it can enable unauthorized access and control over the affected systems. Users of these server platforms are advised to take immediate steps to mitigate potential exploitation.

Affected Version(s)

HPE Compute Scale-up Server 3200 platform 0

HPE Compute Scale-up Server 3250 platform 0

HPE Superdome Flex 280 server 0

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpe...
vendor-advisory

CVSS V3.1

Score:
7.2
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.