Potential security vulnerabilities have been identified in the HP One Agent for certain HP PC products, which might allow for escalation of privilege and/or denial of service. HP is releasing software updates to mitigate these potential vulnerabilities.
CVE-2026-5064
This high-severity CVE scores 8.5 under a secondary CVSS source (NVD's own analysis pending). EPSS exploit probability: 0.1%, top 98% of all CVEs by exploit prediction. GitHub Security Advisory data not yet ingested — confidence will rise once GHSA publishes (typical lag: hours to days for open-source ecosystem CVEs; never for infrastructure-only CVEs).
- High severity, but no confirmed exploitation yet
No vendor fix yet — apply a workaround or compensating control (WAF / firewall / segmentation) and watch for a patch.
- CVSS v3
- 8.5
- EG Score
- 8.5(medium)
- EG Risk
- 43(Track)EG Risk 43/100SSVC: Track
EG Risk is EchelonGraph's 0–100 priority score: it fuses intrinsic severity with real-world exploitation and automatability so you can rank equal-severity CVEs and fix the most dangerous first. Higher = act sooner. Distinct from the 0–10 EG Score (severity).
How it’s computedSeverity85% × 45%Exploitation0% × 40%Automatability30% × 15%Action: Routine — remediate on your standard cadence. - EPSS PROB
- 0%
- EPSS %ILE
- 2%
- KEV
- Not listed
Published
June 15, 2026
Last Modified
June 18, 2026
References (1)
- hp-security-alert@hphttps://support.hp.com/us-en/document/ish_15146555-15146580-16/hpsbhf04060
Vendor Advisories for CVE-2026-5064(1)
These vendors published their own advisory mentioning this CVE — often with vendor-specific remediation steps + affected product lists not in NVD.
Weakness Classification(1)
MITRE Common Weakness Enumeration — the root-cause categories this CVE belongs to.
Data Freshness Timeline
(refreshed 16× in last 7d / 94× in last 30d)
Each row is a source pipeline that fetched or updated this CVE on that date, with what changed. For example, "NVD update" means NVD published or revised its analysis for this CVE; "MITRE cvelistV5" means we ingested or refreshed it from the CNA feed. Most recent first.
Showing the most recent 100 of 214 total refreshes for this CVE.
- 2026-08-26 14:46 UTCEPSS rescore
- 2026-08-25 13:49 UTCEPSS rescore
- 2026-08-24 23:27 UTCEG score recompute
- 2026-08-24 23:27 UTCGHSA enrichment
- 2026-08-23 21:17 UTCGHSA enrichment
- 2026-08-23 09:31 UTCEG score recompute
- 2026-08-23 09:31 UTCGHSA enrichment
- 2026-08-23 00:19 UTCEPSS rescore
- 2026-08-21 23:49 UTCEPSS rescore
- 2026-08-21 20:01 UTCGHSA enrichment
- 2026-08-21 08:11 UTCEG score recompute
- 2026-08-21 08:11 UTCGHSA enrichment
- 2026-08-20 22:55 UTCEPSS rescore
- 2026-08-20 20:23 UTCGHSA enrichment
- 2026-08-20 08:35 UTCEG score recompute
- 2026-08-20 08:35 UTCGHSA enrichment
- 2026-08-19 17:04 UTCEPSS rescore
- 2026-08-19 13:10 UTCEG score recompute
- 2026-08-19 13:10 UTCGHSA enrichment
- 2026-08-18 13:48 UTCEPSS rescore
- 2026-08-17 13:47 UTCEPSS rescore
- 2026-08-17 10:13 UTCGHSA enrichment
- 2026-08-16 22:26 UTCEG score recompute
- 2026-08-16 22:26 UTCGHSA enrichment
- 2026-08-16 14:56 UTCEPSS rescore
Show 75 moreShow fewer
- 2026-08-16 10:38 UTCEG score recompute
- 2026-08-16 10:38 UTCGHSA enrichment
- 2026-08-15 22:52 UTCGHSA enrichment
- 2026-08-15 10:11 UTCEG score recompute
- 2026-08-15 10:11 UTCGHSA enrichment
- 2026-08-15 01:30 UTCEPSS rescore
- 2026-08-14 20:07 UTCGHSA enrichment
- 2026-08-14 08:20 UTCEG score recompute
- 2026-08-14 08:20 UTCGHSA enrichment
- 2026-08-13 22:00 UTCEPSS rescore
- 2026-08-13 20:33 UTCGHSA enrichment
- 2026-08-13 06:31 UTCGHSA enrichment
- 2026-08-12 18:44 UTCEG score recompute
- 2026-08-12 18:44 UTCGHSA enrichment
- 2026-08-12 13:51 UTCEPSS rescore
- 2026-08-12 06:57 UTCGHSA enrichment
- 2026-08-11 19:10 UTCEG score recompute
- 2026-08-11 19:10 UTCGHSA enrichment
- 2026-08-11 07:18 UTCEG score recompute
- 2026-08-11 07:18 UTCGHSA enrichment
- 2026-08-11 00:00 UTCEPSS rescore
- 2026-08-10 19:31 UTCGHSA enrichment
- 2026-08-10 05:35 UTCGHSA enrichment
- 2026-08-09 17:48 UTCEG score recompute
- 2026-08-09 17:48 UTCGHSA enrichment
- 2026-08-09 13:46 UTCEPSS rescore
- 2026-08-09 06:02 UTCGHSA enrichment
- 2026-08-08 18:15 UTCEG score recompute
- 2026-08-08 18:15 UTCGHSA enrichment
- 2026-08-08 16:37 UTCEPSS rescore
- 2026-08-08 06:28 UTCGHSA enrichment
- 2026-08-07 18:41 UTCEG score recompute
- 2026-08-07 18:41 UTCGHSA enrichment
- 2026-08-07 06:48 UTCGHSA enrichment
- 2026-08-06 19:01 UTCEG score recompute
- 2026-08-06 19:01 UTCGHSA enrichment
- 2026-08-06 13:47 UTCEPSS rescore
- 2026-08-06 07:14 UTCGHSA enrichment
- 2026-08-05 19:27 UTCEG score recompute
- 2026-08-05 19:27 UTCGHSA enrichment
- 2026-08-05 19:17 UTCEPSS rescore
- 2026-08-04 15:39 UTCEG score recompute
- 2026-08-04 15:39 UTCGHSA enrichment
- 2026-08-04 15:10 UTCEPSS rescore
- 2026-08-03 20:42 UTCEG score recompute
- 2026-08-03 20:42 UTCGHSA enrichment
- 2026-08-03 10:36 UTCEPSS rescore
- 2026-08-03 08:55 UTCGHSA enrichment
- 2026-08-02 19:48 UTCGHSA enrichment
- 2026-08-02 08:01 UTCEG score recompute
- 2026-08-02 08:01 UTCGHSA enrichment
- 2026-08-02 02:27 UTCEPSS rescore
- 2026-08-01 20:14 UTCGHSA enrichment
- 2026-08-01 08:27 UTCEG score recompute
- 2026-08-01 08:27 UTCGHSA enrichment
- 2026-08-01 04:16 UTCEPSS rescore
- 2026-07-31 13:13 UTCGHSA enrichment
- 2026-07-30 23:40 UTCEG score recompute
- 2026-07-30 23:40 UTCGHSA enrichment
- 2026-07-30 16:28 UTCEPSS rescore
- 2026-07-30 04:33 UTCEG score recompute
- 2026-07-30 04:33 UTCGHSA enrichment
- 2026-07-30 01:30 UTCEPSS rescore
- 2026-07-30 01:30 UTCEPSS rescore
- 2026-07-29 14:57 UTCGHSA enrichment
- 2026-07-29 03:09 UTCEG score recompute
- 2026-07-29 03:09 UTCGHSA enrichment
- 2026-07-28 15:37 UTCEPSS rescore
- 2026-07-28 01:43 UTCGHSA enrichment
- 2026-07-27 07:43 UTCGHSA enrichment
- 2026-07-26 19:54 UTCEG score recompute
- 2026-07-26 19:54 UTCGHSA enrichment
- 2026-07-25 14:18 UTCEPSS rescore
- 2026-07-25 14:18 UTCEPSS rescore
- 2026-07-24 14:18 UTCEPSS rescore
Related CVEs(same CWE)
Same CWE
10 shownCWE-427
- CVE-2018-12805EG 9.8EPSS p90CRITICAL
- CVE-2017-3097EG 9.8EPSS p94CRITICAL
- CVE-2017-3092EG 9.8EPSS p95CRITICAL
- CVE-2017-3090EG 9.8EPSS p95CRITICAL
- CVE-2017-6517EG 9.8EPSS p99CRITICAL
- CVE-2017-20123EG 8.8HIGH
- CVE-2017-7966EG 8.8HIGH
- CVE-2017-7884EG 8.4HIGH
- CVE-2017-20052NVD 5.0EG 7.8HIGH
- CVE-2017-20051NVD 6.3EG 7.8HIGH
Frequently asked(5)
What is CVE-2026-5064?
When was CVE-2026-5064 disclosed?
Is CVE-2026-5064 actively exploited?
What is the CVSS score of CVE-2026-5064?
How do I remediate CVE-2026-5064?
Dependency Blast Radius
Explore the affected products and dependency analysis for CVE-2026-5064
Is Your Infrastructure Affected by CVE-2026-5064?
EchelonGraph automatically scans your cloud infrastructure and maps CVE exposure using blast radius analysis.