HP Support Assistant <9.55.10.0 Local Privilege Escalation
CVE-2026-19915 Published on September 22, 2026

HP Support Assistant - Local Escalation of Privilege
A potential security vulnerability has been identified in the HP Support Assistant for versions prior to 9.55.10.0. The vulnerability could potentially allow a local attacker to escalate privileges due to insufficient access controls.

Vendor Advisory NVD

Vulnerability Analysis

CVE-2026-19915 can be exploited with local system access, and requires small amount of user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality and integrity and availability.

Attack Vector:
LOCAL
Attack Complexity:
LOW
Privileges Required:
LOW
User Interaction:
NONE

Weakness Type

Improper Privilege Management

The software does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.


Products Associated with CVE-2026-19915

Want to know whenever a new CVE is published for HP Support Assistant? stack.watch will email you.

 

Affected Versions

HP Inc HP Support Assistant: