CVE-2026-79842CWE-862broken-access-control

CVE-2026-79842

Critical · published October 9, 2026

CVSS v3.1
9.1
EPSS
0%
Percentile
24.7
In the wild
Unconfirmed
What it is

An authentication bypass vulnerability exists in HPE Intelligent Management Center (iMC) prior to v7.3 E0713

The record
Technical detail
CVSS v3.1
9.1 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00328 · 24.7th percentile
Weakness
CWE-862 · Missing Authorization
Published
2026-10-09T01:18Z
References (1)
https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05157en_us · [email protected]
EPSS history
Timeline
  • 10 OCT 03:31Z
    EPSS moved — → 0%
    epss
  • 08 OCT 20:37Z
    An authentication bypass vulnerability exists in HPE Intelligent Management Center (iMC) prior to v7.3 E0713
    cvelistv5
  • 08 OCT 20:37Z
    An authentication bypass vulnerability exists in HPE Intelligent Management Center (iMC) prior to v7.3 E0713
    cvelistv5