high · CVSS v3 7.2 · EPSS 0.00371

CVE-2026-76740

A remote command execution flaw exists in HPE Compute Scale‑up Server 3200/3250 and Superdome Flex/Flex 280 RMC interfaces. Attackers can ru

Overview

A remote command execution flaw exists in HPE Compute Scale‑up Server 3200/3250 and Superdome Flex/Flex 280 RMC interfaces. Attackers can run arbitrary code on the RMC without authentication, potentially gaining full control over the server’s management plane.

Description

A security vulnerability in HPE Compute Scale-up Server 3200 and 3250 platforms, Superdome Flex and Superdome Flex 280 servers could be exploited remotely to execute arbitrary commands on the RMC.

Impact

Confidentiality: attackers can read or modify RMC configuration and logs. Integrity: arbitrary commands can alter system settings or firmware. Availability: malicious actions could disrupt RMC services or lock out administrators. The primary impact is on the management plane, potentially enabling full system compromise.

Remediation

Apply the latest HPE firmware/BIOS update that addresses CVE‑2026‑76740. Disable or restrict RMC network access to trusted IP ranges, enforce strong authentication, and enable network segmentation or firewall rules to block unauthorized RMC traffic. Monitor RMC logs for suspicious activity and consider disabling unused RMC services.

Risk context

High severity with a CVSS score of 7.2 and an EPSS of 0.00371 indicates a low probability but potentially high impact. Defenders should prioritize patching and network hardening promptly to mitigate the risk.

Affected products

  • HPE Compute Scale‑up Server 3200
  • HPE Compute Scale‑up Server 3250
  • HPE Superdome Flex
  • HPE Superdome Flex 280

Scores

Severity
high
CVSS v2
8.3
CVSS v3
7.2
CVSS v4
—
EPSS
0.00371

remote command execution RMC HPE management plane high severity patch network hardening

← All CVEs

Related CVEs

high

CVE-2026-112107

A flaw has been found in ztxz16 fastllm up to 1.8.2. Affected by this issue is the function SafeTensorItem::CreateBuffer of the file src/model.cpp of the component Safetensors Weight Loading. This manipulation of the argument data_offsets causes buffer overflow. The attack can be initiated remotely. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet.

View analysis

high

CVE-2026-108121

CVE-2026-108121 is a high‑severity flaw in SME Server 11.0rc1‑215 that lets a privileged user inject Apache directives during domain creation. The injected directives corrupt httpd.conf, causing Apache to fail to start after reboot and leading to a denial‑of‑service of the web server and its virtual hosts. The issue is exploitable only by users with high privileges on the host.

View analysis

high

CVE-2026-112081

A vulnerability was determined in hankcs HanLP up to 2.1.0-beta.64. This affects the function hanlp.load of the file plugins/hanlp_common/hanlp_common/reflection.py of the component Model Config Loading. This manipulation of the argument classpath causes deserialization. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded yet.

View analysis

high

CVE-2026-112082

A vulnerability was identified in sgl-project SGLang up to 0.5.19. This impacts the function Scheduler.expert_distribution_handle of the file python/sglang/srt/eplb/expert_distribution.py of the component Expert-Distribution Recording Endpoint. Such manipulation leads to denial of service. It is possible to launch the attack remotely. The exploit is publicly available and might be used. The pull request to fix this issue awaits acceptance.

View analysis