HPE Fixes Critical iLO 7 Admin Access Flaw and iMC Authentication Bypass

HPE released patches for two critical vulnerabilities impacting HPE iLO 7 and HPE Intelligent Management Center (iMC). CVE-2026-79820 can allow remote administrative access to iLO when used with HPE Compute Ops Management, while CVE-2026-79842 enables remote authentication bypass in iMC; both have high CVSS scores (9.0 and 9.1). No confirmed exploitation has been reported; administrators are advised to update iLO to 1.25.01+ and iMC to v7.3 E0713 and to isolate management interfaces until patched.