Threat database

CVE-2026-76663 is a stack-based buffer overflow vulnerability in Hewlett Packard Enterprise's HPE NonStop TELSERV component. This vulnerability can cause memory corruption leading to a denial of service (DoS) condition. No information about affected versions or available patches is provided.

CVE-2026-76662 is a stack-based buffer overflow vulnerability in Hewlett Packard Enterprise's HPE NonStop TELSERV. This flaw can lead to memory corruption and cause a denial of service (DoS) condition. The vulnerability has a medium severity rating with a CVSS score of 5.9. No specific affected versions or patch information are provided. There are no known exploits in the wild at this time.

CVE-2026-76661 is a high-severity vulnerability in Hewlett Packard Enterprise's HPE NonStop QIOM component. It involves improper input validation leading to an out-of-bounds write that can corrupt buffer data. The vulnerability has a CVSS score of 7.6, indicating significant impact on integrity and availability. No affected versions or patch information are provided. No known exploits in the wild have been reported.

CVE-2026-76660 is a high-severity vulnerability in Hewlett Packard Enterprise's HPE NonStop CIPSAM product. It involves improper input validation that leads to an out-of-bounds write, potentially corrupting buffer data. The vulnerability has a CVSS score of 8.7, indicating significant impact on confidentiality, integrity, and availability. No affected versions or patch information are provided in the available data.

CVE-2026-76659 is a high-severity vulnerability in the finger daemon component of Hewlett Packard Enterprise's HPE NonStop TCP/IP UTILITIES. It involves missing authentication for a critical function, which could allow an unauthenticated remote attacker to cause a denial of service (DoS). No confidentiality or integrity impact is reported. There is no information about affected versions or available patches.

CVE-2026-76656 is a medium severity vulnerability in Hewlett Packard Enterprise's HPE NonStop TCP/IP UTILITIES. It involves missing authentication for a critical function, specifically when the traceroute utility is executed under certain conditions. This flaw could allow an unauthenticated remote attacker to cause a denial of service (DoS) on the affected system.

CVE-2026-73799 is a high-severity stack-based buffer overflow vulnerability (CWE-121) in Hewlett Packard Enterprise's HPE NonStop SNMP Trap Multiplexer. This flaw may cause memory corruption leading to denial of service. No affected versions or patch information are provided.

CVE-2026-76655 is a high severity stack-based buffer overflow vulnerability in Hewlett Packard Enterprise's HPE NonStop SNMP Trap Multiplexer. This flaw may allow remote code execution without requiring privileges or user interaction. The vulnerability impacts availability but does not affect confidentiality or integrity according to the CVSS vector. No affected versions or patch information are provided.

CVE-2026-73798 is a high-severity vulnerability in Hewlett Packard Enterprise's HPE NonStop DNS 9.2.3 Non Secure Version. It involves a misinterpretation of input (CWE-115) that can lead to a denial of service (DoS) condition. The vulnerability does not impact confidentiality but can affect integrity and availability. There is no explicit information on patches or fixes available at this time.

CVE-2026-73797 is a medium severity vulnerability in Hewlett Packard Enterprise's HPE NonStop TSQLFIL product. It involves undefined behavior that may cause address space corruption when a specific API is called. The vulnerability does not impact confidentiality but can affect integrity and availability. No affected versions or patch information are provided.

CVE-2026-73796 is a medium severity vulnerability in Hewlett Packard Enterprise's HPE NonStop TSQLEXE component. It involves a CWE-564 SQL injection flaw that may cause an application crash when processing a crafted SQL query. The vulnerability does not impact confidentiality but can affect integrity and availability. No affected versions or patch information are provided.

CVE-2026-73795 is a stack-based buffer overflow vulnerability in Hewlett Packard Enterprise's HPE NonStop TMF Auditread2 component. This vulnerability can lead to a denial of service condition. The CVSS 3.1 base score is 6.4, indicating a medium severity level. The attack vector is local with high attack complexity and requires low privileges. There is no indication of confidentiality impact, but integrity and availability impacts are present. No patch or remediation information is currently available.

CVE-2026-73794 is a medium severity vulnerability in Hewlett Packard Enterprise's HPE NonStop MODULAR NSJ involving a predictable seed in its pseudo-random number generator (PRNG). This weakness could reduce the randomness of generated values, potentially impacting confidentiality, integrity, and availability. No affected versions or patches are specified in the available data.

CVE-2026-73793 is a high-severity vulnerability in Hewlett Packard Enterprise's HPE NonStop Middleware involving deserialization of untrusted data and secret key handling issues. It allows an attacker with high privileges to potentially impact confidentiality, integrity, and availability of the system. The vulnerability has a CVSS 3.1 score of 7.9, indicating significant risk. No affected versions or patch information are provided in the available data.

CVE-2026-73792 is a security vulnerability in Hewlett Packard Enterprise's HPE NonStop Java JToolkit involving improper neutralization of special elements used in OS commands, leading to potential OS command injection and buffer overflow. The vulnerability has a CVSS score of 3.8, indicating low severity. No affected versions or patch information are provided.

CVE-2026-73791 is a heap-based buffer overflow vulnerability in Hewlett Packard Enterprise's HPE NonStop Hpjmeter. The flaw can cause both stack and heap buffer overflows. The CVSS score is low, indicating limited impact, with no confidentiality or integrity impact and only low impact on availability. There are no known exploits in the wild and no patch information is provided.

CVE-2026-73790 is a high severity vulnerability in Hewlett Packard Enterprise's HPE NonStop iTP WebServer caused by improper input validation (CWE-20). This flaw can lead to memory corruption and potentially cause the system to shut down unexpectedly. No specific affected versions or patch information are provided.

CVE-2026-79842 is a critical authentication bypass vulnerability in Hewlett Packard Enterprise's Intelligent Management Center (iMC) affecting versions prior to v7.3 E0713. This flaw allows an attacker to bypass authentication controls, potentially leading to full confidentiality and integrity compromise of the affected system without requiring user interaction or privileges.

CVE-2026-79818 is a medium severity vulnerability in Hewlett Packard Enterprise ClearPass Policy Manager (CPPM). It involves an API interface flaw that allows an unauthenticated remote attacker to bypass authentication controls. Exploiting this vulnerability could enable the attacker to access sensitive information from the affected system. The vulnerability affects specific versions of CPPM, including 6.11.0 through 6.11.15 and version 6.14.0. No known exploits are reported in the wild, and no patch information is provided.

CVE-2026-79817 is a medium severity vulnerability in Hewlett Packard Enterprise ClearPass Policy Manager client software that allows local attackers with limited privileges to disclose sensitive information. The vulnerability does not require user interaction and impacts confidentiality without affecting integrity or availability.