hp is a CVE Numbering Authority (CNA) — an organization authorized to assign CVE IDs to vulnerabilities in its scope. It has published 896 CVE records since 2009.

How many CVEs has hp published?

hp has published 896 CVE records, including 81 in the last two years.

What is hp's CVE data quality grade?

RadicalNotion.AI grades hp's CVE data quality as F, with an overall completeness score of 17.4%. This reflects how consistently its CVE records include vendor (20.9%), product (27.9%), CVSS (5.8%), and CWE (14.8%) information.

What products does hp publish CVEs for?

hp most frequently publishes CVEs for openview network node manager, system management homepage, windows, intelligent management center, elitebook 1050 g1.

Which vendors does hp cover?

hp publishes CVEs across 9 distinct vendors, most often HP, HP Inc., microsoft, linux, Samsung.

Is hp actively publishing CVEs?

hp is currently active, based on 81 CVEs in the last two years.

What is the average severity of hp's CVEs?

The average CVSS base score across hp's scored CVEs is 6.7.

How many critical CVEs has hp published?

hp has published 251 critical-severity CVEs and 272 high-severity CVEs.

Are any of hp's CVEs in CISA's Known Exploited Vulnerabilities catalog?

Yes. 1 of hp's CVEs are listed in CISA's Known Exploited Vulnerabilities (KEV) catalog, meaning they are confirmed to be exploited in the wild.

What are the most common weakness types in hp's CVEs?

hp's CVEs most often map to these CWE weakness types: CWE-269 (Improper Privilege Management), CWE-367 (Time-of-check Time-of-use (TOCTOU) Race Condition), CWE-120 (Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')).

How does hp rank among CNAs?

By total CVE volume, hp ranks #39 of 370 CNAs, and it reports more complete CVE records than 1% of all CNAs.

Grade F

Active

hp

Name: hp CNA CVE data quality report card
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE Numbering Authority

Latest CVE published February 10, 2026

896

CVEs published

Total assigned

16.2

Years active

2009–2026

6.7

Avg CVSS

Across scored CVEs

Recent CVEs

Last 2 years

Overview

hp is a CVE Numbering Authority that has published 896 CVE records since 2009. It is currently classified as active, with 81 CVEs published in the last two years. Its CVE data quality is graded F (17.4% overall completeness).

Among the 370 CNAs tracked here, hp ranks #39 by CVE volume and reports more complete records than 1% of all CNAs.

Data quality report card

How complete and consistent hp's CVE records are, scored across vendor, product, CVSS, and CWE coverage.

A CVE record only requires a description to be published. “Completeness” measures how often hp also fills in the optional — but extremely useful — fields that make a vulnerability actually actionable: the affected vendor and product, a CVSS severity score, and a CWE weakness type. A higher score means more of this CNA’s CVEs include those details, so defenders spend less time enriching records by hand.

Report card grade

17.4%

Overall score

Overall completeness17.4%

Vendor completeness20.9%

Product completeness27.9%

CVSS completeness5.8%

CWE completeness14.8%

100%

Update rate

Records revised after publishing

Vendor diversity

Distinct vendors covered

209 chars

Avg description length

Per CVE record

2009-11-17

First CVE date

Earliest assignment

2026-02-10

Latest CVE date

Most recent assignment

6.7

Average CVSS

Across scored CVEs

What these scores mean

Vendor completeness: The share of this CNA's CVEs that name an affected vendor.
Product completeness: The share that name a specific affected product.
CVSS completeness: The share that include a CVSS severity score.
CWE completeness: The share mapped to a CWE weakness type.
Update rate: How often this CNA revises CVE records after first publishing them.
Vendor diversity: How many distinct vendors this CNA publishes CVEs for.

Severity and exploitation

How the CVSS severity of hp's published CVEs breaks down, and how many are known to be exploited in the wild.

Critical251

High272

Medium356

Low33

In CISA’s Known Exploited Vulnerabilities catalog

One of hp's CVEs is confirmed exploited in the wild and carries a CISA remediation deadline.

Common weakness types

The CWE weakness categories hp most often assigns to its CVEs. Follow any weakness to its full explanation.

Publishing activity by year

How many CVEs hp has published each year.

2019

2020

2021

2022

2023

2024

2025

2026

12-month change

How hp's CVE data quality has shifted over the trailing year.

Previous grade

Current grade

Score change

9.8% → 80.6% (+70.8%)

Improved most in CVSS Completeness (+97.2 pts)

Top vendors

The vendors hp publishes the most CVEs for.

HP873 CVEs
HP Inc.183 CVEs
microsoft41 CVEs
linux16 CVEs
Samsung5 CVEs
ibm5 CVEs
Hewlett Packard Enterprise3 CVEs
Red Hat3 CVEs

Latest CVEs

The most recent CVEs assigned by hp.

CVE-2026-5922CWE-79
Poly Voice – Potential Unauthorized Modification of WebUI using XSS Attack
Medium · CVSS 5.9
EPSS 0.2%2026-07-08
CVE-2026-5923CWE-352
Poly Voice – Potential Unauthorized Modification of WebUI using CSRF Attack
Medium · CVSS 6.0
EPSS 0.1%2026-07-08
CVE-2026-2891CWE-400
Poly Voice Devices (CCX, Trio, Edge E) – Potential Denial of Service
High · CVSS 8.2
EPSS 0.3%2026-07-01
CVE-2026-8864CWE-428
HP Fan Control App – Potential Escalation of Privilege
High · CVSS 7.3
EPSS 0.1%2026-06-30
CVE-2026-7539CWE-379
HP Dock Accessory WMI Provider Installer Security Update
High · CVSS 7.3
EPSS 0.1%2026-06-24
CVE-2026-5064CWE-427
HP One Agent Software – Security Update
High · CVSS 8.5
EPSS 0.1%2026-06-15
CVE-2026-0826CWE-121
Poly Voice – Possible Remote Control of Certain Poly Devices
Critical · CVSS 9.2
EPSS 24.5%2026-06-01
CVE-2026-8632CWE-77
HP Linux Imaging and Printing Software – Potential Escalation of Privilege and Arbitrary Code Execution
High · CVSS 8.5
EPSS 0.9%2026-05-20
CVE-2026-8631CWE-122
HP Linux Imaging and Printing Software – Potential Escalation of Privilege and Arbitrary Code Execution
Critical · CVSS 9.3
EPSS 1.3%2026-05-20
CVE-2026-3291CWE-926
Samsung Print Service Plugin – Potential Information Disclosure
Medium · CVSS 6.9
EPSS 0.1%2026-05-06
CVE-2026-4682CWE-121
Certain HP DeskJet All In One (AIO) Devices – Potential Remote Code Execution & Potential Buffer Overflow
High · CVSS 8.7
EPSS 0.3%2026-04-15
CVE-2026-4667CWE-250
HP System Optimizer - Escalation of Privilege
High · CVSS 7.3
EPSS 0.1%2026-04-15

Track new hp CVEs as they are published and get AI-written analysis and remediation guidance.

Monitor hp CVEs

Other CNAs

Compare data quality across other CVE Numbering Authorities.

mitreGrade F · 112,208 CVEs PatchstackGrade A · 14,729 CVEs VulDBGrade A · 12,140 CVEs microsoftGrade F · 11,701 CVEs redhatGrade F · 10,745 CVEs GitHub_MGrade A · 10,605 CVEs LinuxGrade F · 10,294 CVEs WordfenceGrade A · 8,652 CVEs

Browse all CNAs

Frequently asked questions

Common questions about the hp CNA.

What is the hp CNA?: hp is a CVE Numbering Authority (CNA) — an organization authorized to assign CVE IDs to vulnerabilities in its scope. It has published 896 CVE records since 2009.
How many CVEs has hp published?: hp has published 896 CVE records, including 81 in the last two years.
What is hp's CVE data quality grade?: RadicalNotion.AI grades hp's CVE data quality as F, with an overall completeness score of 17.4%. This reflects how consistently its CVE records include vendor (20.9%), product (27.9%), CVSS (5.8%), and CWE (14.8%) information.
What products does hp publish CVEs for?: hp most frequently publishes CVEs for openview network node manager, system management homepage, windows, intelligent management center, elitebook 1050 g1.
Which vendors does hp cover?: hp publishes CVEs across 9 distinct vendors, most often HP, HP Inc., microsoft, linux, Samsung.
Is hp actively publishing CVEs?: hp is currently active, based on 81 CVEs in the last two years.
What is the average severity of hp's CVEs?: The average CVSS base score across hp's scored CVEs is 6.7.
How many critical CVEs has hp published?: hp has published 251 critical-severity CVEs and 272 high-severity CVEs.
Are any of hp's CVEs in CISA's Known Exploited Vulnerabilities catalog?: Yes. 1 of hp's CVEs are listed in CISA's Known Exploited Vulnerabilities (KEV) catalog, meaning they are confirmed to be exploited in the wild.
What are the most common weakness types in hp's CVEs?: hp's CVEs most often map to these CWE weakness types: CWE-269 (Improper Privilege Management), CWE-367 (Time-of-check Time-of-use (TOCTOU) Race Condition), CWE-120 (Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')).
How does hp rank among CNAs?: By total CVE volume, hp ranks #39 of 370 CNAs, and it reports more complete CVE records than 1% of all CNAs.

References

CNA report-card grades are computed by RadicalNotion.AI from published CVE records. CVE data is sourced from the CVE Program.

Track hp CVEs

Monitor new vulnerabilities as this CNA publishes them, with AI-written analysis and remediation guidance.

Start free See pricing