CVE-2026-79820 – HPE Integrated Lights-Out (iLO) 7
CVSS 9
CRITICAL
[2] Critical – Same Day Deployment
“When the gatekeeper stops checking IDs, every server it guards is open to whoever asks.”
Hewlett Packard Enterprise has released a firmware update for HPE Integrated Lights-Out (iLO) 7 that fixes a remote user validation failure. CVE-2026-79820 has a CVSS score of 9.0, Critical severity. Because iLO provides out-of-band management of the server below the operating system, a failure to validate remote users weakens the control layer that administrators rely on to manage, recover, and secure their hardware. Organizations running iLO 7 should apply the updated firmware on a same-day basis to close this gap in their server management infrastructure.
Key Details
- Attack Vector
- Network
- Attack Complexity
- High
- Privileges Required
- None
- User Interaction
- None
- CWE Classification
- CWE-287
Patch this CVE on all your endpoints in under 5 minutes.
First 200 endpoints are free forever, scale as needed.