{"id":"CVE-2026-44875","title":"In HPE Cray Programming Environment versions 25.03 and 25.09, prior to 26.03, the method that CPE is deployed on HPCM potentially allows elevated access by a local unprivileged user.","summary":"In HPE Cray Programming Environment versions 25.03 and 25.09, prior to 26.03, the method that CPE is deployed on HPCM potentially allows elevated access by a local unprivileged user.","severity":"high","cvss":7.8,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvssSource":"adp","cwe":["CWE-276"],"vendor":"Hewlett Packard Enterprise (HPE)","product":"HPE Cray Programming Environment","affected":["hpe_cray_programming_environment 25.03","hpe_cray_programming_environment 25.09"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2026-11-05T20:44:37.317291Z"},"published":"2026-11-05","updated":"2026-11-05","sourceUpdated":"2026-11-05T20:44:41.150Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-44875","references":[{"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbcr05046en_us&docLocale=en_US"}],"tags":["cve.org"],"ingestedAt":"2026-11-05T22:38:31.877Z","slug":"CVE-2026-44875","body":"## Overview\n\nIn HPE Cray Programming Environment versions 25.03 and 25.09, prior to 26.03, the method that CPE is deployed on HPCM potentially allows elevated access by a local unprivileged user.\n\n## Affected\n\n- `hpe_cray_programming_environment 25.03`\n- `hpe_cray_programming_environment 25.09`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":43,"depthScoreParts":{"impact":42.9,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}