Description
No description provided
Published: 2026-10-22
Score: 7.2 High
EPSS: n/a
KEV: No
Impact: Remote Code Execution
Action: Immediate Patch
AI Analysis

Impact

The vulnerability is described only by its title; it likely allows an authenticated user to execute arbitrary code on systems hosting the Wireless Network Management Interface, leading to full system compromise. The lack of a formal description means the exact flaw is unknown, but the impact is clear: attackers can gain unauthorized system control once authenticated to the interface.

Affected Systems

Affected systems are Hewlett Packard Enterprise products that include a Wireless Network Management Interface. The specific product name and affected software versions are not disclosed, but any HPE device providing this management capability is potentially vulnerable unless it has been updated after the release of the advisory.

Risk and Exploitability

With a CVSS score of 7.2 the vulnerability is considered a high-impact flaw. The EPSS score is unavailable, and the vulnerability is not listed in the CISA KEV catalog, but the attack requires authentication and network access to the interface, suggesting that it could be exploitable by insiders or attackers with legitimate credentials. The combination of medium‑to‑high severity and an attack surface that relies on authorized access merits immediate attention.

Generated by OpenCVE AI on October 23, 2026 at 04:25 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Apply any vendor‑provided patch or update for the Wireless Network Management Interface once it becomes available.
  • If a patch is not yet released, disable or remove the wireless network management interface or restrict its external accessibility to a trusted, restricted group of users.
  • Implement tight network segmentation for devices exposing the interface and monitor authentication logs for abnormal activity.
  • Review and strengthen authentication and authorization controls on the interface, ensuring that only the minimal required privileges are granted.

Generated by OpenCVE AI on October 23, 2026 at 04:25 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Fri, 23 Oct 2026 04:45:00 +0000

Type Values Removed Values Added
Weaknesses CWE-284
CWE-94

Fri, 23 Oct 2026 00:45:00 +0000

Type Values Removed Values Added
Description No description provided
Title Authenticated Remote Code Execution allows Unauthorized System Control in Wireless Network Management Interface
References
Metrics cvssV3_1

{'score': 7.2, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'}


Subscriptions

No data.

cve-icon MITRE

Status: PUBLISHED

Assigner: hpe

Published:

Updated: 2026-10-22T19:06:50.866Z

Reserved: 2026-09-22T14:51:39.865Z

Link: CVE-2026-95704

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-10-22T19:18:06.120

Modified: 2026-10-22T19:18:06.120

Link: CVE-2026-95704

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-23T04:30:04Z

Weaknesses
  • CWE-284

    Improper Access Control

  • CWE-94

    Improper Control of Generation of Code ('Code Injection')