CVE-2026-91093

HighCVSS 8.5/10Last modified Oct 24, 2026

Description

A potential security vulnerability has been identified in HP One Agent for certain HP PC products, which might allow for escalation of privilege and/or arbitrary code execution. HP is releasing software updates to mitigate the potential vulnerability.

Metrics

CVSS 4.0 8.5/10CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weakness enumeration

CWE-427

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published
Oct 23, 2026
Last modified
Oct 24, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-910955.3In proxygen from v2024.10.28.00 until v2026.09.28.00, the HTTPTransaction::onWebTransportUniStream and HTTPTransaction::onWebTransportBidiStCVE-2026-910967.5In proxygen from v2024.10.28.00 until v2026.09.28.00, WebTransportImpl::terminateSessionStreams (WebTransportImpl::destroy in releases beforCVE-2026-910979.8HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components CVE-2026-910989.8HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components CVE-2026-910999.8HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components CVE-2026-91104.2Inappropriate implementation in UI in Google Chrome on Windows prior to 148.0.7778.179 allowed a remote attacker who had compromised the renCVE-2026-911009.8HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components CVE-2026-911019.8HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components CVE-2026-911029.8HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components CVE-2026-911039.8HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components CVE-2026-911049.8HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components CVE-2026-911059.8HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components
CVE-2026-91093: High severity, CVSS 8.5 | Vulnix