CVE-2026-73793: CWE-502 Deserialization of untrusted data in Hewlett Packard Enterprise HPE NonStop Middleware

This vulnerability (CWE-502) in HPE NonStop Middleware relates to improper handling of secret keys and unsafe deserialization of untrusted data. It has a CVSS 3.1 score of 7.9, indicating high severity with network attack vector, high privileges required, no user interaction, and impacts on confidentiality (low), integrity (high), and availability (high). No vendor advisory or patch information is available to confirm remediation status.

The vulnerability could allow attackers with high privileges to exploit deserialization flaws and secret key handling weaknesses, potentially leading to significant integrity and availability impacts, as well as some confidentiality loss. However, no known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until official fixes are available, restrict access to high-privilege accounts and monitor for suspicious activity related to middleware components.