CVE-2026-7539

A potential security vulnerability has been identified in the HP Accessory WMI Provider installer for some HP Docking Stations, which might allow escalation of privilege and/or arbitrary code execution. HP is releasing software updates to mitigate the potential vulnerability.

CVSS

No CVSS.

References

Link	Resource
https://support.hp.com/us-en/document/ish_15190804-15190818-16/hpsbhf04129

Configurations

No configuration.

History

25 Oct 2026, 23:10

Type	Values Removed	Values Added
Summary		(es) Se ha identificado una posible vulnerabilidad de seguridad en el instalador del proveedor WMI de accesorios de HP para algunas estaciones de acoplamiento HP, lo que podría permitir la escalada de privilegios y/o la ejecución de código arbitrario. HP está lanzando actualizaciones de software para mitigar la posible vulnerabilidad.

Information

Published : 2026-06-24 21:16

Updated : 2026-10-25 23:10

NVD link : CVE-2026-7539

Mitre link : CVE-2026-7539

CVE.ORG link : CVE-2026-7539

JSON object : View

Products Affected

No product.

CWE

CWE-379

Creation of Temporary File in Directory with Insecure Permissions

{"id": "CVE-2026-7539", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-7539", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-06-25T00:00:00+00:00"}}], "cvssMetricV40": [{"type": "Secondary", "source": "hp-security-alert@hp.com", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 7.3, "Automatable": "NOT_DEFINED", "attackVector": "LOCAL", "baseSeverity": "HIGH", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "PASSIVE", "attackComplexity": "HIGH", "attackRequirements": "PRESENT", "privilegesRequired": "LOW", "subIntegrityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "HIGH", "vulnAvailabilityImpact": "HIGH", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "HIGH", "vulnConfidentialityImpact": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "hp-security-alert@hp.com", "affectedData": [{"vendor": "HP Inc.", "product": "HP Dock Accessory", "versions": [{"status": "affected", "version": "0", "lessThan": "<1.4.11.0", "versionType": "custom"}], "defaultStatus": "unaffected"}]}], "published": "2026-06-24T21:16:58.350", "references": [{"url": "https://support.hp.com/us-en/document/ish_15190804-15190818-16/hpsbhf04129", "source": "hp-security-alert@hp.com"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "hp-security-alert@hp.com", "description": [{"lang": "en", "value": "CWE-379"}]}], "descriptions": [{"lang": "en", "value": "A potential security vulnerability has been identified in the HP Accessory WMI Provider installer for some HP Docking Stations, which might allow escalation of privilege and/or arbitrary code execution. HP is releasing software updates to mitigate the potential vulnerability."}, {"lang": "es", "value": "Se ha identificado una posible vulnerabilidad de seguridad en el instalador del proveedor WMI de accesorios de HP para algunas estaciones de acoplamiento HP, lo que podr\u00eda permitir la escalada de privilegios y/o la ejecuci\u00f3n de c\u00f3digo arbitrario. HP est\u00e1 lanzando actualizaciones de software para mitigar la posible vulnerabilidad."}], "lastModified": "2026-10-25T23:10:00.167", "sourceIdentifier": "hp-security-alert@hp.com"}