CVE-2026-84900: HP ThinPro 8.1 SP10 and ThinPro 9 SP3 Security Updates
Previous versions of HP ThinPro (prior to HP ThinPro 8.1 SP10) could potentially contain security vulnerabilities. HP has released HP ThinPro 8.1 SP10, which includes updates to mitigate potential vulnerabilities. Previous versions of HP ThinPro (prior to HP ThinPro 9 SP3) could potentially contain security vulnerabilities. HP has released HP ThinPro 9 SP3, which includes updates to mitigate potential vulnerabilities.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
HP ThinProto a version that resolves this vulnerability.Fixed in 8.1 SP10 - Upgrade
Upgrade
HP ThinProto a version that resolves this vulnerability.Fixed in 9 SP3
Event History
Frequently Asked Questions
Which HP ThinPro deployments should be prioritized for updating?
HP ThinPro installations earlier than 8.1 SP10 or earlier than 9 SP3 are identified as potentially containing security vulnerabilities. Update the applicable release branch to HP ThinPro 8.1 SP10 or HP ThinPro 9 SP3.
Is authentication or user interaction required according to the available severity data?
The CVSS vector indicates no privileges and no user interaction are required. It also indicates low attack complexity, although the attack vector is listed as physical.
What security impact is indicated for affected systems?
The CVSS vector indicates high potential impact to confidentiality and integrity, with no indicated impact to availability.