CVE-2014-2626: HP Network Virtualization

High severity, CVSS 9.4. EPSS: 19.4% chance of exploitation in the next 30 days.

Directory traversal vulnerability in the toServerObject function in HP Network Virtualization 8.6 (aka Shunra Network Virtualization) allows remote attackers to create files, and consequently execute arbitrary code, via crafted input, aka ZDI-CAN-2024.

Affected products

• HP Network Virtualization: version 8.6 only

Published 2014-07-26. Last modified 2026-06-17.