{"id":"CVE-2026-84900","state":"PUBLISHED","title":"HP ThinPro 8.1 SP10 and ThinPro 9 SP3 Security Updates","description":"Previous versions of HP ThinPro (prior to HP ThinPro 8.1 SP10) could potentially contain security vulnerabilities. HP has released HP ThinPro 8.1 SP10, which includes updates to mitigate potential vulnerabilities. \nPrevious versions of HP ThinPro (prior to HP ThinPro 9 SP3) could potentially contain security vulnerabilities. HP has released HP ThinPro 9 SP3, which includes updates to mitigate potential vulnerabilities.","publishedAt":"2026-10-05T20:28:48.572Z","updatedAt":"2026-10-06T13:57:48.597Z","severity":{"score":6.8,"label":"Medium","version":"4.0","vector":"CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","source":"hp"},"assigner":"hp","products":["HP Inc ThinPro 8.1","HP Inc ThinPro 9"],"affected":[{"vendor":"HP Inc","product":"ThinPro 8.1","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"ThinPro 8.1 SP10","versionType":"custom"}],"platforms":["Linux"]},{"vendor":"HP Inc","product":"ThinPro 9","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"ThinPro 9 SP3","versionType":"custom"}],"platforms":["Linux"]}],"references":["https://support.hp.com/us-en/document/ish_15735991-15736015-16/hpsbhf04155","https://support.hp.com/us-en/document/ish_15736095-15736118-16/hpsbhf04154"],"weaknesses":["CWE-354"],"ingestedAt":"2026-10-29T20:13:15.269Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/84xxx/CVE-2026-84900.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-84900","state":"PUBLISHED","datePublished":"2026-10-05T20:28:48.572Z","dateUpdated":"2026-10-06T13:57:48.597Z","assignerShortName":"hp","assignerOrgId":"74586083-13ce-40fd-b46a-8e5d23cfbcb2","dateReserved":"2026-09-02T15:15:29.572Z"},"containers":{"cna":{"title":"HP ThinPro 8.1 SP10 and ThinPro 9 SP3 Security Updates","descriptions":[{"lang":"en","value":"Previous versions of HP ThinPro (prior to HP ThinPro 8.1 SP10) could potentially contain security vulnerabilities. HP has released HP ThinPro 8.1 SP10, which includes updates to mitigate potential vulnerabilities. \nPrevious versions of HP ThinPro (prior to HP ThinPro 9 SP3) could potentially contain security vulnerabilities. HP has released HP ThinPro 9 SP3, which includes updates to mitigate potential vulnerabilities."}],"affected":[{"vendor":"HP Inc","product":"ThinPro 8.1","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"ThinPro 8.1 SP10","versionType":"custom"}],"platforms":["Linux"]},{"vendor":"HP Inc","product":"ThinPro 9","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"ThinPro 9 SP3","versionType":"custom"}],"platforms":["Linux"]}],"references":[{"url":"https://support.hp.com/us-en/document/ish_15735991-15736015-16/hpsbhf04155","tags":["vendor-advisory"]},{"url":"https://support.hp.com/us-en/document/ish_15736095-15736118-16/hpsbhf04154","tags":["vendor-advisory"]}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV4_0":{"attackVector":"PHYSICAL","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnIntegrityImpact":"HIGH","subIntegrityImpact":"NONE","vulnAvailabilityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","version":"4.0","baseSeverity":"MEDIUM","baseScore":6.8,"vectorString":"CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-354","lang":"en","description":"CWE-354 Improper validation of integrity check value","type":"CWE"}]}],"providerMetadata":{"shortName":"hp","orgId":"74586083-13ce-40fd-b46a-8e5d23cfbcb2","dateUpdated":"2026-10-05T20:37:46.833Z"},"credits":[{"lang":"en","value":"Darren McDonald / AmberWolf","type":"finder"}],"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 1.0.5"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-10-06T13:57:40.682017Z","id":"CVE-2026-84900","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-10-06T13:57:48.597Z"}}]}}}