CVE-2025-43017 HIGH

CVE-2025-43017: HP ThinPro 8.1 SP8 Security Updates

Vendor Hp Inc.
Product HP ThinPro 8.1
Weakness CWE-250
Published October 28, 2025
Last update February 26, 2026
View on NVD All CVEs

CVSS base score

8.5/10
Attack vector Local
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

What the vulnerability does

01Description

HP ThinPro 8.1 System management application failed to verify user's true id. HP has released HP ThinPro 8.1 SP8, which includes updates to mitigate potential vulnerabilities.

Key dates

02Disclosure timeline

October 28, 2025 CVE published
February 26, 2026 Record updated