A security vulnerability in HPE NonStop EXPAND may cause out-of-bounds memory read resulting in buffer overflow. (CVE-2026-76665)

CVE-2026-76665 describes a security vulnerability in HPE NonStop EXPAND involving an out-of-bounds memory read that results in a buffer overflow condition. The vulnerability is classified under CWE-125 (Out-of-bounds Read). The CVSS v3.1 base score is 7.1, indicating high severity, with attack vector as adjacent network, high attack complexity, no privileges required, no user interaction, and impacts on confidentiality (low), integrity (high), and availability (high). No vendor advisory or patch information is available to confirm remediation status.

Successful exploitation could allow an attacker with adjacent network access and no privileges to cause a buffer overflow, potentially leading to significant integrity and availability impacts, and some confidentiality loss. The exact exploitation method and impact details beyond the CVSS vector are not provided. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, monitoring vendor communications for updates is recommended. No specific mitigations are indicated in the provided data.