CVE-2026-79820: Critical severity HPE Integrated Lights-Out (iLO) 7 firmware vulnerability
Published Oct 5, 2026
·Updated
A remote user validation failure vulnerability exists in HPE Integrated Lights-Out (iLO) 7 firmware.
Affected Software
1 affected component
HPE Integrated Lights-Out (iLO) 7 firmware
Event History
Oct 5, 2026
CVE Published
via MITRE·02:47 PM
Data Sourced
via MITRE·02:47 PM
DescriptionSeverity
Data Sourced
via NVD·03:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which systems should be prioritized for triage?
Prioritize HPE systems using Integrated Lights-Out (iLO) 7 firmware, particularly where the iLO management interface is reachable over the network.
2
What does an attacker need to exploit this issue?
The CVSS vector indicates network access is required, but no existing privileges or user interaction are required. Exploitation has high attack complexity.
3
What is the potential impact of successful exploitation?
Successful exploitation may result in high-impact compromise of confidentiality, integrity, and availability. The scope is also rated as changed, indicating effects may extend beyond the vulnerable component's security authority.