CVE-2026-76740: HPE Compute Scale-up Server 3200 and 3250 platforms, Superdome Flex and Superdome Flex 280 servers, Remote Command Execution vulnerability
Published Oct 19, 2026
·Updated
A security vulnerability in HPE Compute Scale-up Server 3200 and 3250 platforms, Superdome Flex and Superdome Flex 280 servers could be exploited remotely to execute arbitrary commands on the RMC.
Affected Software
3 affected components
HPE Compute Scale-up Server 3200 and 3250
HPE Superdome Flex
HPE Superdome Flex 280
Event History
Oct 19, 2026
CVE Published
via MITRE·06:25 AM
Data Sourced
via MITRE·06:25 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·07:16 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What access does an attacker need to exploit this issue?
The CVSS vector indicates that an attacker needs high privileges and can exploit the issue remotely without user interaction. Attack complexity is rated low.
2
Which systems are in scope?
The issue affects HPE Compute Scale-up Server 3200 and 3250 platforms, HPE Superdome Flex servers, and HPE Superdome Flex 280 servers.
3
What is the potential impact of successful exploitation?
Successful exploitation could allow remote execution of arbitrary commands on the RMC. The reported impact includes high confidentiality, integrity, and availability impact.