High severity · published Dec 9, 2025
CVE-2025-11531
HP System Event Utility and Omen Gaming Hub – Potential Arbitrary Code Execution
8.8
CVSS
0.4%
EPSS
No
On KEV
Description
HP System Event Utility and Omen Gaming Hub might allow execution of
certain files outside of their restricted paths. This
potential vulnerability was remediated with HP System
Event Utility version 3.2.12 and Omen Gaming Hub version
1101.2511.101.0.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 34% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
HS
HP System Event Utility · HP Inc
before 3.2.12 · source: vendor
OG
Omen Gaming Hub · HP Inc
before 1101.2511.101.0 · source: vendor, NVD
SE
System Event Utility · HP
before 3.2.12 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-11531
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-11531
Vendor Advisory
https://support.hp.com/us-en/document/ish_13537533-13537555-16/hpsbgn04079
More from HP System Event Utility
7.1
CVE-2026-2915
HP System Event Utility – Denial of Service