{"id":"CVE-2026-76739","kind":"vulnerability","aliases":["CVE-2026-76739"],"related":[],"title":"HPE Scale-up Server and Superdome Flex: remote RMC filesystem listing and modification","description":"A potential security vulnerability in HPE Compute Scale-up Server 3200 and 3250 platforms and Superdome Flex server could be remotely exploited to list and modify RMC filesystem.","summary":"HPE Compute Scale-up Server 3200 and 3250 platforms and Superdome Flex servers have a flaw that lets a remote party list and modify the RMC filesystem. The sources do not say which access or credentials are needed.","severity":"medium","cvss":4.3,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["bmc-management","hpe","infrastructure","scale-up-server","superdome-flex"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-10-19T06:17:24+00:00","first_seen_at":"2026-10-23T21:57:17+00:00","triaged_at":"2026-10-25T04:39:44+00:00","updated_at":"2026-10-25T04:39:44+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-10-25T04:39:44Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"HPE Scale-up Server and Superdome Flex: remote RMC filesystem listing and modification","impact":"medium","summary":"HPE Compute Scale-up Server 3200 and 3250 platforms and Superdome Flex servers have a flaw that lets a remote party list and modify the RMC filesystem. The sources do not say which access or credentials are needed.","category":"infrastructure","nicknames":[],"who_cares":["hpe","superdome-flex","scale-up-server","bmc-management"],"confidence":0.5,"needs_auth":"unknown","worst_case":"Remote attacker lists and modifies files on the RMC filesystem","analyst_note":"Check the HPE security bulletin for CVE-2026-76739 for affected firmware versions, fixed versions and whether authentication is required.","how_to_check":"unknown","needs_analyst":true,"not_affected_if":[],"who_is_affected":"Teams that run HPE Compute Scale-up Server 3200 or 3250 platforms or Superdome Flex servers and reach their RMC management interface over a network. The sources do not give affected firmware versions or whether the flaw needs a special configuration.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000554,"input_tokens":3290,"output_tokens":451,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2026':16A,19A '-76739':17A,20A '3200':39B,83C '3250':41B,85C 'access':67B 'bmc':22B 'bmc-manag':21B 'comput':34B,78C 'could':91C 'credenti':69B 'cve':15A,18A 'exploit':94C 'filesystem':11A,60B,100C 'flaw':49B 'flex':8A,32B,45B,89C 'hpe':1A,24B,33B,77C 'infrastructur':25B 'let':51B 'list':12A,55B,96C 'manag':23B 'modif':14A 'modifi':57B,98C 'need':71B 'parti':54B 'platform':42B,86C 'potenti':73C 'remot':9A,53B,93C 'rmc':10A,59B,99C 'say':65B 'scale':3A,27B,36B,80C 'scale-up':2A,35B,79C 'scale-up-serv':26B 'secur':74C 'server':5A,29B,38B,46B,82C,90C 'sourc':62B 'superdom':7A,31B,44B,88C 'superdome-flex':30B 'vulner':75C","nicknames":[],"mitigations":[],"who_affected":"Teams that run HPE Compute Scale-up Server 3200 or 3250 platforms or Superdome Flex servers and reach their RMC management interface over a network. The sources do not give affected firmware versions or whether the flaw needs a special configuration.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-19T06:17:24+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss_by":"security-alert@hpe.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-76739","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-76739","severity":null,"published_at":"2026-10-19T06:17:24+00:00","modified_at":"2026-10-19T21:13:39+00:00","first_seen_at":"2026-10-23T21:57:17+00:00","fetched_at":"2026-10-23T22:28:56+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}