{"id":"CVE-2026-95778","published":"2026-11-09T14:17:24.873","lastModified":"2026-11-09T16:17:35.463","description":"A remote code execution vulnerability exists in HPE Morpheus Software.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwes":[],"vendors":[],"products":[],"references":[{"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbvs05168en_us&docLocale=en_US","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A remote code execution (RCE) vulnerability exists in HPE Morpheus Software, allowing authenticated users to execute arbitrary code remotely without user interaction. This is critical due to the high CVSS score and the potential for full system compromise.","exploitability":"Exploitation requires low-privilege authentication (PR:L) and no user interaction (UI:N), with low attack complexity (AC:L), making it feasible for compromised or insider accounts.","blast_radius":"Successful exploitation could lead to complete confidentiality, integrity, and availability loss on affected systems, potentially enabling lateral movement across the infrastructure.","remediation":"Upgrade to HPE Morpheus Software version 2.590 or later, as this is the earliest known fixed version addressing CVE-2026-95778.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","authenticated","web-app","hpe-morpheus"],"model":"garnet-coder","analyzedAt":"2026-11-10T09:47:39.816Z"}}