In HPE Cray Programming Environment versions 25.03 and 25.09, prior to 26.03, the method that CPE is deployed on HPCM potentially allows elevated…
In HPE Cray Programming Environment versions 25.03 and 25.09, prior to 26.03, the method that CPE is deployed on HPCM potentially allows elevated access by a local unprivileged user.
Read at NIST National Vulnerability Database (CVE API 2.0)
- Vendor
- HPE
- Product
- HPE Cray Programming Environment
- CVSS v3.1
- 7.8 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Exploitation
- SSVC none, automatable no, impact total
- Weakness
- CWE-276
- NVD status
- Received
Why it ranks 28 (Notable)
- CVSS v3.1 7.8 high
- SSVC: total technical impact
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
- CVE-2026-44875 on this site · NVD · CVE.org · Vulnpedia