CVE-2026-15431CWE-1220

CVE-2026-15431

published September 3, 2026

CVSS
7.3
EPSS
0%
Percentile
0.5
In the wild
Unconfirmed
What it is

A potential security vulnerability has been identified in the HP Support

Assistant for versions prior to 9.53.2.0. The vulnerability

could potentially allow a local attacker to escalate

privileges due to insufficient access controls.

The record
Technical detail
CVSS
7.3 · NONE
CVSS v4.0
7.3 · CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00091 · 0.5th percentile
Weakness
CWE-1220 · Insufficient Granularity of Access Control
Published
2026-09-03T23:17Z
References (1)
https://support.hp.com/us-en/document/ish_15587742-15587765-16/hpsbgn04131 · [email protected]
EPSS history
Timeline
  • 05 SEP 03:40Z
    EPSS moved — → 0%
    epss
  • 03 SEP 18:19Z
    HP Support Assistant – Potential Escalation of Privilege
    cvelistv5