CVE-2026-95779

Summary

The HPE Morpheus Manager software exposes confidential certificate information due to improper access controls, allowing authenticated users to access sensitive cryptographic material. This violates confidentiality and could enable further attacks like impersonation or decryption of intercepted traffic.

Exploitability

Exploitation requires low skill and only a valid low-privileged account, as the vulnerability stems from insufficient authorization checks on certificate data endpoints.

Blast radius

If exploited, attackers could obtain private keys or certificates to impersonate the appliance, decrypt TLS traffic, or pivot into other systems trusting those credentials.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to HPE Morpheus Manager version 2.590 or later, which addresses this certificate exposure flaw.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.