First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2026-76718

HighCVSS 8.2/10Last modified Sep 29, 2026

Description

A potential security vulnerability in HPE OneView can be exploited to allow remote session hijacking or other unauthorized actions.

Metrics

CVSS 3.1 8.2/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N

Weakness enumeration

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

Vendor	Product	Versions
Hewlett Packard Enterprise	HPE OneView	< 11.40

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbgn05140en_us&docLocale=en_US

Timeline

Published: Sep 29, 2026
Last modified: Sep 29, 2026
NVD status: Awaiting Analysis

Related CVEs from 2026

CVE-2026-767198.2A security vulnerability in HPE OneView may be exploited remotely to perform session hijacking, data theft or other unauthorized actions.CVE-2026-76726.3A security vulnerability has been detected in youlaitech youlai-boot up to 2.21.1. This affects the function getUserList of the file src/mai CVE-2026-767204.3A vulnerability in HPE OneView can be remotely exploited to cause a URL redirect.CVE-2026-767219.8Buffer overflow vulnerability exists in the affected interface of HPE Networking Instant ON that could allow an unauthenticated remote attac CVE-2026-767229.8Uncontrolled Format string vulnerabilities exist in the affected interface of HPE Networking Instant ON APs that could allow an unauthentica CVE-2026-767239.6Buffer overflow vulnerabilities exist in the affected interface of HPE Networking Instant ON APS that could allow an unauthenticated adjacen CVE-2026-767249.6A command injection vulnerability exists in CLI of the affected HPE Networking Instant ON APs that could allow an unauthenticated adjacent a CVE-2026-767259.6A vulnerability has been identified in a management protocol of HPE Networking Instant ON APs that could allow an unauthenticated adjacent a CVE-2026-767268.1An authentication bypass vulnerability in the API endpoint of HPE Networking Instant ON could allow an unauthenticated remote attacker to by CVE-2026-767277.2Command injection vulnerabilities exist in the affected interface of HPE Networking Instant ON that could allow an authenticated remote atta CVE-2026-767287.2A vulnerability in the API endpoint of HPE Networking Instant ON APs could allow an authenticated remote attacker with high privileges to co CVE-2026-767296.6A format string vulnerability in the API endpoint of HPE Networking Instant ON APs could allow an authenticated remote attacker with high pr

CVE-2026-76718: High severity, CVSS 8.2 | Vulnix