CVE-2026-89084CWE-22path-traversal

CVE-2026-89084

published September 17, 2026

CVSS
8.8
EPSS
1%
Percentile
55.4
In the wild
Unconfirmed
What it is

HP

has identified potential security vulnerabilities in the HP Advance software

that may enable elevation of privilege, remote code execution, or arbitrary

file write under certain conditions, impacting the HP Advance server hosting

the software.

The record
Technical detail
CVSS
8.8 · NONE
CVSS v4.0
8.8 · CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00778 · 55.4th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2026-09-17T00:17Z
References (1)
https://support.hp.com/us-en/document/ish_15646496-15646518-16/hpsbpi04149 · [email protected]
EPSS history
Timeline
  • 18 SEP 04:02Z
    EPSS moved — → 1%
    epss
  • 16 SEP 19:54Z
    HP Advance – Potential Elevation of Privilege, Remote Code Execution & Arbitrary File Write
    cvelistv5