CVE-2026-95778

Summary

A remote code execution (RCE) vulnerability exists in HPE Morpheus Software, allowing authenticated users to execute arbitrary code remotely without user interaction. This is critical due to the high CVSS score and the potential for full system compromise.

Exploitability

Exploitation requires low-privilege authentication (PR:L) and no user interaction (UI:N), with low attack complexity (AC:L), making it feasible for compromised or insider accounts.

Blast radius

Successful exploitation could lead to complete confidentiality, integrity, and availability loss on affected systems, potentially enabling lateral movement across the infrastructure.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to HPE Morpheus Software version 2.590 or later, as this is the earliest known fixed version addressing CVE-2026-95778.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.