{"id":"CVE-2026-95785","kind":"vulnerability","aliases":["CVE-2026-95785"],"related":[],"title":"Unnamed system component lets authorized users change system-managed content","description":"A vulnerability exists in a system component that may, under certain conditions, allow an authorized user to make unauthorized changes to system-managed content. Successful exploitation could affect system confidentiality, integrity, and availability, and may disrupt trusted interactions among system functions.","summary":"A flaw in an unnamed system component may let a logged-in authorized user make unauthorized changes to system-managed content. The description says this could affect confidentiality, integrity and availability, and disrupt trusted interactions between system functions.","severity":"high","cvss":7.2,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["other"],"not_affected_if":[],"how_to_check":"unknown: the advisory names no product or version. Look for the HPE security bulletin that cites CVE-2026-95785 and compare it with your HPE products.","fix":null,"status":"open","published_at":"2026-11-10T20:19:49+00:00","first_seen_at":"2026-11-10T20:46:17+00:00","triaged_at":"2026-11-10T20:47:49+00:00","updated_at":"2026-11-10T20:50:57+00:00","category":"other","confidence":0.2,"triage":{"at":"2026-11-10T20:47:49Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"unknown","title":"Unnamed system component lets authorized users change system-managed content","impact":"medium","summary":"A flaw in an unnamed system component may let a logged-in authorized user make unauthorized changes to system-managed content. The description says this could affect confidentiality, integrity and availability, and disrupt trusted interactions between system functions.","audience":"businesses","category":"other","nicknames":[],"who_cares":[],"confidence":0.3,"fix_status":"unknown","needs_auth":"yes","worst_case":"authorized user alters system-managed content; availability disrupted","analyst_note":"Identify the affected system component and its fixed versions from the NVD entry at https://nvd.nist.gov/vuln/detail/CVE-2026-95785; the description names no product.","how_to_check":"unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"unknown","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000643,"input_tokens":4534,"output_tokens":380,"severity_before":"high"},"analyst_status":"done","analyst_note":"Identify the affected system component and its fixed versions from the NVD entry at https://nvd.nist.gov/vuln/detail/CVE-2026-95785; the description names no product.","search":"'-2026':13A,16A '-95785':14A,17A 'affect':46B,86C 'allow':70C 'among':97C 'author':5A,31B,72C 'avail':50B,91C 'certain':68C 'chang':7A,35B,77C 'compon':3A,24B,64C 'condit':69C 'confidenti':47B,88C 'content':11A,40B,82C 'could':45B,85C 'cve':12A,15A 'descript':42B 'disrupt':52B,94C 'exist':60C 'exploit':84C 'flaw':19B 'function':57B,99C 'integr':48B,89C 'interact':54B,96C 'let':4A,26B 'log':29B 'logged-in':28B 'make':33B,75C 'manag':10A,39B,81C 'may':25B,66C,93C 'say':43B 'success':83C 'system':2A,9A,23B,38B,56B,63C,80C,87C,98C 'system-manag':8A,37B,79C 'trust':53B,95C 'unauthor':34B,76C 'unnam':1A,22B 'user':6A,32B,73C 'vulner':59C","nicknames":[],"mitigations":[],"who_affected":"Not yet known. The CVE record names no product. It was assigned by HPE and needs an authorized (high-privilege) account over the network, so only someone who already holds admin-level access could exploit it. Check the HPE bulletin when it is published.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"unknown","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["high","other"],"campaign_type":null,"search_a":"'-2026':13A,16A '-95785':14A,17A 'author':5A 'chang':7A 'compon':3A 'content':11A 'cve':12A,15A 'let':4A 'manag':10A 'system':2A,9A 'system-manag':8A 'unnam':1A 'user':6A","search_b":"'affect':46B 'author':31B 'avail':50B 'chang':35B 'compon':24B 'confidenti':47B 'content':40B 'could':45B 'descript':42B 'disrupt':52B 'flaw':19B 'function':57B 'integr':48B 'interact':54B 'let':26B 'log':29B 'logged-in':28B 'make':33B 'manag':39B 'may':25B 'say':43B 'system':23B,38B,56B 'system-manag':37B 'trust':53B 'unauthor':34B 'unnam':22B 'user':32B","search_c":"'affect':86C 'allow':70C 'among':97C 'author':72C 'avail':91C 'certain':68C 'chang':77C 'compon':64C 'condit':69C 'confidenti':88C 'content':82C 'could':85C 'disrupt':94C 'exist':60C 'exploit':84C 'function':99C 'integr':89C 'interact':96C 'make':75C 'manag':81C 'may':66C,93C 'success':83C 'system':63C,80C,87C,98C 'system-manag':79C 'trust':95C 'unauthor':76C 'user':73C 'vulner':59C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T20:19:49+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss_by":"security-alert@hpe.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-95785","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-95785","severity":null,"published_at":"2026-11-10T20:19:49+00:00","modified_at":"2026-11-10T20:19:49+00:00","first_seen_at":"2026-11-10T20:46:17+00:00","fetched_at":"2026-11-10T20:46:17+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-95785:2716","url":null,"severity":null,"published_at":"2026-11-10T20:50:57+00:00","modified_at":"2026-11-10T20:50:57+00:00","first_seen_at":"2026-11-10T20:50:57+00:00","fetched_at":"2026-11-10T20:50:57+00:00","note":"NVD text names no product; CVSS 7.2 (AV:N/PR:H) assigned by HPE (security-alert@hpe.com), so likely an HPE product, unconfirmed. HPE advance notice HPESBNW05178 (Nov 10) returned no readable text and lists no versions. Nothing confirmed on product, versions or fix; recheck when the HPE bulletin is published."}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}