Dashboard / CVE-2026-44875

CVE-2026-44875

HIGH
MEDIUM Priority: 0.01 BB Relevance: 41/100
Published: 2026-11-05 Modified: 2026-11-12 First seen: 2026-11-05 Status: active

Attack Surface

Low Complexity No Interaction Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: Unchanged
C: High
I: High
A: High

Description

In HPE Cray Programming Environment versions 25.03 and 25.09, prior to 26.03, the method that CPE is deployed on HPCM potentially allows elevated access by a local unprivileged user.

Weakness Classification (1)

Affected Software (4)

VendorProductVersion
Hewlett Packard Enterprise (HPE) HPE Cray Programming Environment 25.03
Hewlett Packard Enterprise (HPE) HPE Cray Programming Environment 25.09
Hewlett Packard Enterprise (HPE) HPE Cray Programming Environment 25.03
Hewlett Packard Enterprise (HPE) HPE Cray Programming Environment 25.09

References & Advisories (1)

Bug Bounty Relevance

41 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

7.8 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS — Exploitation Probability

0.13%
Raw Score 0.001330
Percentile 2.9%
Date 2026-11-13

EPSS Trend

2026-11-13
0.00133
2026-11-12
0.00133
2026-11-10
0.00133
2026-11-09
0.00133
2026-11-08
0.00133
2026-11-07
0.00133
2026-11-06
0.00133

Intelligence Sources

mitre ref →
nvd ref →

External Links