All vulnerabilities
CVE-2026-76740

HPE Compute Scale-up Server 3200 and 3250 platforms, Superdome Flex and Superdome Flex 280 servers, Remote Command Execution vulnerability

Hewlett Packard Enterprise HPE Compute Scale-up Server 3200 platform
Open in ThreatlineRecord JSON
CVSS
7.2High
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.37%Chance of exploitation activity in the next 30 days, higher than 29% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in1.77.30Also 1.03.38, 4.17.03 and 1 moreCVE List
Published19 Oct 2026Updated 21 Oct 2026CVE List

What fixes it

  • 1.77.30HPE Compute Scale-up Server 3200 platformCVE List
  • 1.03.38HPE Compute Scale-up Server 3250 platformCVE List
  • 4.17.03HPE Superdome Flex serverCVE List
  • 2.17.03HPE Superdome Flex 280 serverCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

A security vulnerability in HPE Compute Scale-up Server 3200 and 3250 platforms, Superdome Flex and Superdome Flex 280 servers could be exploited remotely to execute arbitrary commands on the RMC.

Text from CVE List

Affected versions 4

  • HPE Compute Scale-up Server 3200 platformaffected: all versions before 1.77.30CVE List
  • HPE Compute Scale-up Server 3250 platformaffected: all versions before 1.03.38CVE List
  • HPE Superdome Flex serveraffected: all versions before 4.17.03CVE List
  • HPE Superdome Flex 280 serveraffected: all versions before 2.17.03CVE List

References 1