CVE-2026-8864 - Vulnerability Details - OpenCVE

The HP Fan Control App might allow local escalation of privileges. An updated version of HP Fan Control App has been released to mitigate this potential vulnerability.

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Attack Requirements Present

User Interaction None

Vulnerable System Confidentiality Impact High

Vulnerable System Integrity Impact High

Vulnerable System Availability Impact High

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact None

Subsequent System Availability Impact None

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Exploitation none

Automatable no

Technical Impact total

Vendors	Products
Hp Inc.	Hp Fan Control App

No data.

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

Vendors	Products

References

Link	Providers
https://support.hp.com/us-en/document/ish_15217742-15217770-16/hpsbhf04122

History

Tue, 30 Jun 2026 17:30:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Tue, 30 Jun 2026 16:45:00 +0000

Type	Values Removed	Values Added
Description		The HP Fan Control App might allow local escalation of privileges. An updated version of HP Fan Control App has been released to mitigate this potential vulnerability.
Title		HP Fan Control App – Potential Escalation of Privilege
First Time appeared		Hp Inc. Hp Inc. hp Fan Control App
Weaknesses		CWE-428
CPEs		cpe:2.3:a:hp_inc.:hp_fan_control_app:::windows:::::*
Vendors & Products		Hp Inc. Hp Inc. hp Fan Control App
References		https://support.hp.com/us-en/document/ish_15217742-15217770-16/hpsbhf04122
Metrics		cvssV4_0 `{'score': 7.3, 'vector': 'CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N'}`

MITRE

Status: PUBLISHED

Assigner: hp

Published: 2026-06-30T16:21:10.791Z

Updated: 2026-06-30T16:45:49.875Z

Reserved: 2026-05-18T19:44:47.365Z

Link: CVE-2026-8864

Vulnrichment

Updated: 2026-06-30T16:45:45.963Z

NVD

No data.

Redhat

No data.

OpenCVE Enrichment

Updated: 2026-06-30T17:45:04Z

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-8864", "assignerOrgId": "74586083-13ce-40fd-b46a-8e5d23cfbcb2", "state": "PUBLISHED", "assignerShortName": "hp", "dateReserved": "2026-05-18T19:44:47.365Z", "datePublished": "2026-06-30T16:21:10.791Z", "dateUpdated": "2026-06-30T16:45:49.875Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "74586083-13ce-40fd-b46a-8e5d23cfbcb2", "shortName": "hp", "dateUpdated": "2026-06-30T16:21:10.791Z"}, "title": "HP Fan Control App \u2013 Potential Escalation of Privilege", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-428", "description": "CWE-428: Unquoted Search Path or Element", "type": "CWE"}]}], "affected": [{"vendor": "HP Inc.", "product": "HP Fan Control App", "platforms": ["Windows"], "versions": [{"status": "affected", "version": "0", "lessThan": "1.0.0.2", "versionType": "custom"}], "defaultStatus": "unknown"}], "cpeApplicability": [{"operator": "OR", "nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:a:hp_inc.:hp_fan_control_app:*:*:windows:*:*:*:*:*", "versionStartIncluding": "0", "versionEndExcluding": "1.0.0.2"}]}]}], "descriptions": [{"lang": "en", "value": "The HP Fan Control App might allow local escalation of privileges. An updated version of HP Fan Control App has been released\n to mitigate this potential vulnerability.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "The HP Fan Control App might allow local escalation of privileges. An updated version of HP Fan Control App has been released\n to mitigate this potential vulnerability."}]}], "references": [{"url": "https://support.hp.com/us-en/document/ish_15217742-15217770-16/hpsbhf04122"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV4_0": {"attackVector": "LOCAL", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "privilegesRequired": "LOW", "userInteraction": "NONE", "vulnConfidentialityImpact": "HIGH", "subConfidentialityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "subIntegrityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "subAvailabilityImpact": "NONE", "exploitMaturity": "NOT_DEFINED", "Safety": "NOT_DEFINED", "Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "valueDensity": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "version": "4.0", "baseSeverity": "HIGH", "baseScore": 7.3, "vectorString": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"}}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 1.0.2"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-06-30T16:45:40.859012Z", "id": "CVE-2026-8864", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-06-30T16:45:49.875Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-8864", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-06-30T16:45:40.859012Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-06-30T16:45:45.963Z"}}], "cna": {"title": "HP Fan Control App \u2013 Potential Escalation of Privilege", "source": {"discovery": "UNKNOWN"}, "metrics": [{"format": "CVSS", "cvssV4_0": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 7.3, "Automatable": "NOT_DEFINED", "attackVector": "LOCAL", "baseSeverity": "HIGH", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "privilegesRequired": "LOW", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "HP Inc.", "product": "HP Fan Control App", "versions": [{"status": "affected", "version": "0", "lessThan": "1.0.0.2", "versionType": "custom"}], "platforms": ["Windows"], "defaultStatus": "unknown"}], "references": [{"url": "https://support.hp.com/us-en/document/ish_15217742-15217770-16/hpsbhf04122"}], "x_generator": {"engine": "Vulnogram 1.0.2"}, "descriptions": [{"lang": "en", "value": "The HP Fan Control App might allow local escalation of privileges. An updated version of HP Fan Control App has been released\n to mitigate this potential vulnerability.", "supportingMedia": [{"type": "text/html", "value": "The HP Fan Control App might allow local escalation of privileges. An updated version of HP Fan Control App has been released\n to mitigate this potential vulnerability.", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-428", "description": "CWE-428: Unquoted Search Path or Element"}]}], "cpeApplicability": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:hp_inc.:hp_fan_control_app:*:*:windows:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "1.0.0.2", "versionStartIncluding": "0"}], "operator": "OR"}], "operator": "OR"}], "providerMetadata": {"orgId": "74586083-13ce-40fd-b46a-8e5d23cfbcb2", "shortName": "hp", "dateUpdated": "2026-06-30T16:21:10.791Z"}}}, "cveMetadata": {"cveId": "CVE-2026-8864", "state": "PUBLISHED", "dateUpdated": "2026-06-30T16:45:49.875Z", "dateReserved": "2026-05-18T19:44:47.365Z", "assignerOrgId": "74586083-13ce-40fd-b46a-8e5d23cfbcb2", "datePublished": "2026-06-30T16:21:10.791Z", "assignerShortName": "hp"}, "dataVersion": "5.2"}