CVE-2026-44875: High severity vulnerability

Published Nov 5, 2026

Updated

In HPE Cray Programming Environment versions 25.03 and 25.09, prior to 26.03, the method that CPE is deployed on HPCM potentially allows elevated access by a local unprivileged user.

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade HPE Cray Programming Environment to a version that resolves this vulnerability.
Fixed in 26.03

Event History

Nov 5, 2026

CVE Published

via MITRE·07:17 PM

Data Sourced

via MITRE·07:17 PM

DescriptionWeakness

Data Sourced

via NVD·08:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Which deployments are affected?

The issue affects HPE Cray Programming Environment deployments on HPCM in versions 25.03 and 25.09, before version 26.03.

What access does an attacker need?

An attacker needs local access as an unprivileged user. No user interaction is required according to the provided CVSS vector.

What is the impact of successful exploitation?

Successful exploitation can allow elevated access and has high confidentiality, integrity, and availability impact.

How can this be remediated?

Update HPE Cray Programming Environment to version 26.03 or later.

CVE-2026-44875: High severity vulnerability

Remediation

Event History

Frequently Asked Questions

Which deployments are affected?

What access does an attacker need?

What is the impact of successful exploitation?

How can this be remediated?

Company

Resources

Contact

Frequently Asked Questions

Which deployments are affected?

What access does an attacker need?

What is the impact of successful exploitation?

How can this be remediated?