CVE-2026-89083CWE-94code-injection

CVE-2026-89083

published September 17, 2026

CVSS
9.3
EPSS
1%
Percentile
52.4
In the wild
Unconfirmed
What it is

HP

has identified potential security vulnerabilities in the HP Advance software

that may enable elevation of privilege, remote code execution, or arbitrary

file write under certain conditions, impacting the HP Advance server hosting

the software.

The record
Technical detail
CVSS
9.3 · NONE
CVSS v4.0
9.3 · CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:H/SI:H/SA:N
EPSS
0.00696 · 52.4th percentile
Weakness
CWE-94 · Improper Control of Generation of Code ('Code Injection')
Published
2026-09-17T00:17Z
References (1)
https://support.hp.com/us-en/document/ish_15646496-15646518-16/hpsbpi04149 · [email protected]
EPSS history
Timeline
  • 18 SEP 04:02Z
    EPSS moved — → 1%
    epss
  • 16 SEP 19:53Z
    HP Advance – Potential Elevation of Privilege, Remote Code Execution & Arbitrary File Write
    cvelistv5