CVE-2026-44875High· 7.8▾ TwilightIn HPE Cray Programming Environment versions 25.03 and 25.09, prior to 26.03, the method that CPE is deployed on HPCM potentially allows elevated access by a local unprivileged user.
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 42.9 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake. The CVSS score shown above comes from the CISA ADP record, not NVD.
In HPE Cray Programming Environment versions 25.03 and 25.09, prior to 26.03, the method that CPE is deployed on HPCM potentially allows elevated access by a local unprivileged user.
hpe_cray_programming_environment 25.03hpe_cray_programming_environment 25.09Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2025-8766Medium· 6.4A container privilege escalation flaw was found in certain Multi-Cloud Object Gateway Core images
CVE-2025-58713Medium· 6.4Rhpam: privilege escalation via excessive /etc/passwd permissions
CVE-2026-94460High· 7.2IRISPowerscan Insecure default privilege assignment for installation account
CVE-2025-49144High· 7.3Notepad++ Privilege Escalation in Installer via Uncontrolled Executable Search Path
CVE-2026-91895High· 7.1Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Incorrect Default Permissions vulnerability
CVE-2026-16305NoneCVE-2026-16305