HPE Security Advisory
Published Date: May 4, 2026
Advisory Summary
Hewlett Packard Enterprise has released revision 3 of advisory HPESBHF05008 addressing a critical local escalation of privilege vulnerability affecting several HPE server product lines. The impacted models include HPE ProLiant DL, ML, XD, Synergy, Edgeline, MicroServer, and Alletra servers that incorporate specific Intel processors. This advisory aligns with Intel’s firmware advisory INTEL-SA-01396 and the 2026.1 Intel Processor Update (IPU).
The vulnerability could allow an attacker with local access to escalate privileges, potentially compromising system integrity and security. Organizations utilizing the affected HPE infrastructure should promptly review the advisory and apply the recommended firmware updates to mitigate the risk.
This update emphasizes the continued need for vigilance in firmware management on critical IT infrastructure to prevent exploitation of processor-level vulnerabilities that can have broad operational impacts.
Reference: Vendor Advisory