CVE-2026-73794: CWE-337 Predictable seed in Pseudo-Random number generator (PRNG) in Hewlett Packard Enterprise HPE NonStop MODULAR NSJ

HPE NonStop MODULAR NSJ contains a vulnerability classified as CWE-337 due to the use of a predictable seed in its PRNG. This predictable seed undermines the randomness of generated numbers, which can weaken cryptographic operations or other security mechanisms relying on randomness. The CVSS 3.1 base score is 4.6 (medium), reflecting network attack vector, high attack complexity, low privileges required, user interaction needed, and partial impact to confidentiality, integrity, and availability. No vendor advisory or patch information is available to confirm remediation status.

The vulnerability may allow attackers to predict pseudo-random values generated by the system, potentially compromising cryptographic functions or security features that depend on randomness. This could lead to limited confidentiality, integrity, and availability impacts as indicated by the CVSS vector. However, no known exploits are reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until official fixes or mitigations are published by Hewlett Packard Enterprise, users should monitor vendor communications for updates.