Security feed

24 October 2026

advisoryHighOfficial CVE List24 Oct 2026

HPE OneView - Cross-site scripting vulnerability

A potential security vulnerability in HPE OneView can be exploited to allow remote session hijacking or other unauthorized actions.

Announced 29 Sept 2026

HPE OneView CVE-2026-76718

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2026-76718

HPE OneView

Source reference: /containers/cna/affected/0/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2026-76718
Source reference: /cveMetadata/cveId

Publisher severity

high

Source reference: /containers/cna/metrics

Event: #3488 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:36:05 GMT
Publisher date: Tue, 29 Sep 2026 09:58:02 GMT

Read the original announcement

advisoryHighOfficial CVE List24 Oct 2026

HPE OneView - Cross-site scripting vulnerability

A security vulnerability in HPE OneView may be exploited remotely to perform session hijacking, data theft or other unauthorized actions.

Announced 29 Sept 2026

HPE OneView CVE-2026-76719

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2026-76719

HPE OneView

Source reference: /containers/cna/affected/0/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2026-76719
Source reference: /cveMetadata/cveId

Publisher severity

high

Source reference: /containers/cna/metrics

Event: #3434 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:35:30 GMT
Publisher date: Tue, 29 Sep 2026 10:02:22 GMT

Read the original announcement

advisoryMediumOfficial CVE List24 Oct 2026

HPE OneView - URL Redirect vulnerability

A vulnerability in HPE OneView can be remotely exploited to cause a URL redirect.

Announced 29 Sept 2026

HPE OneView CVE-2026-76720

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2026-76720

HPE OneView

Source reference: /containers/cna/affected/0/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2026-76720
Source reference: /cveMetadata/cveId

Publisher severity

medium

Source reference: /containers/cna/metrics

Event: #3431 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:35:28 GMT
Publisher date: Tue, 29 Sep 2026 10:10:58 GMT

Read the original announcement