Threat database

An authentication bypass vulnerability in the SSH daemon of AOS-8 allows an unauthenticated remote attacker to circumvent existing authentication controls. Successful exploitation allows an attacker to gain administrative privileges leading to complete compromise of the AOS-8 host.

A vulnerability in the affected interface of AOS-10 could allow an unauthenticated remote attacker to conduct SQL injection attacks against the AOS-10 instance. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.

Sensitive information disclosure vulnerabilities in the affected interface of AOS-10 could allow an unauthenticated remote attacker to obtain sensitive information from the affected system. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.

A vulnerability in the web-based management interface of AOS could allow an unauthenticated remote attacker to conduct SQL injection attacks against the AOS instance. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.

Buffer overflow vulnerabilities exist in the affected interface of AOS-10 that could lead to unauthenticated remote code execution. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system, leading to complete system compromise.

Vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated remote attacker to bypass existing authentication controls and run arbitrary commands on the underlying host. Successful exploitation could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete system compromise.

Vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated remote attacker to conduct SQL injection attacks against an affected AOS-8 instance. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.

Vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated remote attacker to conduct SQL injection attacks against an affected AOS-8 instance. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.

Buffer overflow vulnerabilities in the affected interface of AOS-10 could lead to unauthenticated remote code execution by sending specially crafted packets to the affected interface. Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system.

Command injection vulnerabilities exist in the affected interface of AOS-8 that could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.

Authentication bypass vulnerabilities in the affected interface of AOS-10 could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.

A security vulnerability in HPE Compute Scale-up Server 3200 and 3250 platforms, Superdome Flex and Superdome Flex 280 servers could be exploited remotely to execute arbitrary commands on the RMC.

A potential security vulnerability in HPE Compute Scale-up Server 3200 and 3250 platforms and Superdome Flex server could be remotely exploited to list and modify RMC filesystem.

CVE-2026-79843 is an out-of-bounds read vulnerability in Hewlett Packard Enterprise's HPE NonStop SQL/MX EXE component. It occurs when a corrupted file is processed under certain conditions, potentially causing information disclosure, process termination, CPU halt, or data corruption. The vulnerability has a CVSS 3.1 base score of 6.5, indicating medium severity. No affected versions or patch information are currently provided.

CVE-2026-79841 is a medium severity buffer overflow vulnerability in Hewlett Packard Enterprise's HPE NonStop RDMA SERVICES NSK. It involves an out-of-bounds memory write that can lead to memory corruption. The vulnerability requires local access with high privileges and user interaction to exploit. No affected versions or patch information are currently provided.

CVE-2026-79840 is a stack-based buffer overflow vulnerability in Hewlett Packard Enterprise's HPE NonStop XABroker. This flaw can lead to memory corruption and cause the affected application to crash. The vulnerability has a high severity rating with a CVSS score of 7.3. No specific affected versions or patch information are provided in the available data.

CVE-2026-79839 is a stack-based buffer overflow vulnerability in Hewlett Packard Enterprise's HPE NonStop ODBC/MX Server. This vulnerability can cause memory corruption leading to application crashes. It requires low privileges and user interaction to exploit and affects confidentiality, integrity, and availability to a limited extent. The vulnerability has a high severity rating with a CVSS score of 7.3.

CVE-2026-79838 is a stack-based buffer overflow vulnerability in Hewlett Packard Enterprise's HPE NonStop ODBC/MX Services. This flaw may lead to memory corruption and cause the affected application to crash. The vulnerability has a high severity rating with a CVSS score of 7.3. No specific affected versions or patch information is provided in the available data.

CVE-2026-79837 is a high-severity vulnerability in Hewlett Packard Enterprise's HPE NonStop SQL/MX UDR SERVER involving improper input validation. This flaw may allow a crafted message to cause process termination, service disruption, or memory corruption, leading to undefined behavior.

CVE-2026-79836 is a medium severity vulnerability in Hewlett Packard Enterprise's HPE NonStop SQL/MX Run-Time Statistics component. It involves improper input validation that can lead to memory corruption and null pointer dereference. Exploitation of this flaw may cause process crashes, denial of service (DoS), or information disclosure.