CVE-2026-89082CWE-94code-injection

CVE-2026-89082

published September 17, 2026

CVSS
9.3
EPSS
1%
Percentile
52.4
In the wild
Unconfirmed
What it is

HP has identified potential security vulnerabilities in the HP Advance software that may enable elevation of privilege, remote code execution, or arbitrary file write under certain conditions, impacting the HP Advance server hosting the software.

The record
Technical detail
CVSS
9.3 · NONE
CVSS v4.0
9.3 · CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00696 · 52.4th percentile
Weakness
CWE-94 · Improper Control of Generation of Code ('Code Injection')
Published
2026-09-17T00:17Z
References (1)
https://support.hp.com/us-en/document/ish_15646496-15646518-16/hpsbpi04149 · [email protected]
EPSS history
Timeline
  • 18 SEP 04:02Z
    EPSS moved — → 1%
    epss
  • 16 SEP 19:50Z
    HP Advance – Potential Elevation of Privilege, Remote Code Execution & Arbitrary File Write
    cvelistv5