{"id":"CVE-2026-91093","aliases":[],"cve":{"records":[{"id":"CVE-2026-91093","source":"hp","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-09-14T18:21:29.580Z","published":"2026-10-23T18:33:58.401Z","modified":"2026-10-29T10:45:48.007Z"}],"publishers":[{"name":"hp","role":"CNA","organizationId":"74586083-13ce-40fd-b46a-8e5d23cfbcb2","modified":"2026-10-23T18:33:58.401Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-10-29T10:45:48.007Z"}],"references":[{"url":"https://support.hp.com/us-en/document/ish_15886229-15886255-16/hpsbhf04150","tags":[],"source":"hp"}],"weaknesses":[{"id":"CWE-427","description":"CWE-427: Uncontrolled Search Path Element","source":"hp"}],"applicability":[{"source":"hp","statements":[{"operator":"OR","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp_inc.:hp_one_agent_software:*:*:windows:*:*:*:*:*","versionStartIncluding":"0","versionEndExcluding":"1.87.4769.0"}]}]}]}],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-10-24T03:55:52.506151Z","decisions":[{"name":"Exploitation","value":"none"},{"name":"Automatable","value":"no"},{"name":"Technical Impact","value":"total"}]}]},"title":"HP One Agent Software – Security Update","titleSource":"hp","descriptionSource":"hp","description":"A potential security vulnerability has been identified in HP One Agent for certain HP PC products, which might allow for escalation\n               of privilege and/or arbitrary code execution. HP is releasing software updates to mitigate the potential vulnerability.","score":8.5,"severity":"high","published":"2026-10-23T18:33:58.401Z","modified":"2026-10-29T10:45:48.007Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"HP Inc.","name":"HP One Agent Software","platforms":["Windows"],"versions":[{"version":"0","status":"affected","lessThan":"1.87.4769.0","versionType":"custom"}],"defaultStatus":"unknown","cpes":[],"source":"hp","url":"https://www.cve.org/CVERecord?id=CVE-2026-91093"}],"remediation":[],"references":["https://support.hp.com/us-en/document/ish_15886229-15886255-16/hpsbhf04150"],"sources":[{"name":"CVE","id":"CVE-2026-91093","modified":"2026-10-29T10:45:48.007Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-91093"}],"assessments":[{"source":"hp","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","score":8.5}],"sourceAffected":[],"observedAt":"2026-10-29T14:48:12.601Z","kev":{"status":"not-listed","checkedAt":"2026-10-31T18:55:34.234Z"},"coverage":[{"source":"NVD","status":"not-checked"},{"source":"GHSA","status":"not-checked"},{"source":"EUVD","status":"not-checked"},{"source":"EPSS","status":"not-checked"}],"evidence":[],"aiSummary":null}