CVE-2026-79835: CWE-20 Improper input validation in Hewlett Packard Enterprise HPE Nonstop KMS Server
Description
CVE-2026-79835 is a low severity vulnerability in Hewlett Packard Enterprise's HPE Nonstop KMS Server caused by improper input validation. A crafted input message can trigger a buffer overflow condition. This vulnerability does not impact confidentiality or integrity but may cause availability issues. No known exploits are reported in the wild. No affected versions or patches are specified in the available data.
CVSS v3.1
Score 2.8low
Affected software
Hewlett Packard Enterprise
HPE Nonstop KMS Server
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability (CVE-2026-79835) involves improper input validation (CWE-20) in the HPE Nonstop KMS Server. Specifically, a crafted input message can cause a buffer overflow, potentially leading to denial of service or application crash. The CVSS 3.1 base score is 2.8, reflecting low severity with local attack vector, low complexity, low privileges required, and user interaction needed. There is no impact on confidentiality or integrity, only availability is affected. No patch or remediation information is provided in the source data.
Potential Impact
The impact is limited to availability disruption due to a buffer overflow triggered by crafted input. There is no confidentiality or integrity impact. No known active exploitation has been reported.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, limit access to the HPE Nonstop KMS Server to trusted users and monitor for unusual application behavior. No official fix or workaround is documented in the provided data.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- hpe
- Date Reserved
- 2026-08-25T14:47:15.581Z
- Cvss Version
- 3.1
- State
- PUBLISHED
Threat ID: 6ad0bdaf2cdf04f6562cd8ca
Added to database: 10/15/2026, 11:49:03 UTC
Last enriched: 10/15/2026, 12:03:19 UTC
Last updated: 10/15/2026, 12:08:14 UTC
Views: 5
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.