All vulnerabilities
CVE-2026-76739

HPE Compute Scale-up Server 3200 and 3250 platforms and Superdome Flex server, Remote RMC file modification

Hewlett Packard Enterprise HPE Compute Scale-up Server 3200 platform
Open in ThreatlineRecord JSON
CVSS
4.3Medium
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.18%Chance of exploitation activity in the next 30 days, higher than 6% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in1.77.30Also 1.03.38, 4.17.03CVE List
Published19 Oct 2026Updated 19 Oct 2026CVE List

What fixes it

  • 1.77.30HPE Compute Scale-up Server 3200 platformCVE List
  • 1.03.38HPE Compute Scale-up Server 3250 platformCVE List
  • 4.17.03HPE Superdome Flex serverCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

A potential security vulnerability in HPE Compute Scale-up Server 3200 and 3250 platforms and Superdome Flex server could be remotely exploited to list and modify RMC filesystem.

Text from CVE List

Affected versions 3

  • HPE Compute Scale-up Server 3200 platformaffected: all versions before 1.77.30CVE List
  • HPE Compute Scale-up Server 3250 platformaffected: all versions before 1.03.38CVE List
  • HPE Superdome Flex serveraffected: all versions before 4.17.03CVE List

References 1