VulnerabilityAnalyzed

CVE-2026-2915

HP System Event Utility might allow denial of service with elevated arbitrary file writes.

MEDIUM 5.2EPSS 0.10%

Does this matter?

Lower severity and a low EPSS score (0.10%). Track it; it rarely justifies an emergency change on its own.

Description

HP System Event Utility might allow denial of service with elevated arbitrary file writes. This potential vulnerability was remediated with HP System Event Utility version 3.2.16.

CVSS 4.0: 5.2 MEDIUMCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M
EPSS: 0.10% probability · 1th percentile
CISA KEV: Not listed
Weakness: CWE-276, CWE-732
Affected: hp/system event utility
Source: hp-security-alert@hp.com

References

https://support.hp.com/us-en/document/ish_14271963-14271996-16/hpsbgn04097Vendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.