Is CVE-2021-26581 actively exploited?

No active exploitation of CVE-2021-26581 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2021-26581 be exploited remotely?

Yes. CVE-2021-26581 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2021-26581?

CVE-2021-26581 has a CVSS score of 6.5 (MEDIUM).

HOME VULNERABILITIESCVE-2021-26581

MEDIUM

CVE-2021-26581

NVD-CWE-noinfoPublished: April 1, 2021· Updated: Jun 17, 2026

6.5

CVSS v3.1

Official Description

A potential security vulnerability has been identified in HPE Superdome Flex server. A denial of service attack can be remotely exploited leaving hung connections to the BMC web interface. The monarch BMC must be rebooted to recover from this situation. Other BMC management is not impacted. HPE has made the following software update to resolve the vulnerability in HPE Superdome Flex Server: Superdome Flex Server Firmware 3.30.142 or later.

NVD Source

Technical Analysis

CVE-2021-26581 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

Exploitation requires low privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

A successful exploit results in availability disruption (denial of service), with a CVSS base score of 6.5.