VulnerabilityAwaiting Analysis

CVE-2026-8864

The HP Fan Control App might allow local escalation of privileges.

HIGH 7.3EPSS 0.14%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (0.14%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

The HP Fan Control App might allow local escalation of privileges. An updated version of HP Fan Control App has been released to mitigate this potential vulnerability.

CVSS 4.0: 7.3 HIGHCVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M
EPSS: 0.14% probability · 4th percentile
CISA KEV: Not listed
Weakness: CWE-428
Source: hp-security-alert@hp.com

References

https://support.hp.com/us-en/document/ish_15217742-15217770-16/hpsbhf04122

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.