CVE-2026-73790
8.2HighPublished 14 Oct 2026 · NVD status: Awaiting Analysis · AI triage by gemini-3.8-flash
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
- Impact
- High impact on availability
- Weakness
- CWE-20
Impact
Unauthenticated remote attackers can corrupt memory and force a full system shutdown over the network. They do not need credentials or user interaction.
Root cause
Improper input validation in the web server allows malformed requests to trigger memory corruption.
Affected systems
Versions not listed — check the vendor advisory.
CVSS v3.1 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
Fix & remediation
Consult HPE security bulletin hpesbns05148en_us for the fixed NonStop release; if immediate patching is not possible, restrict network access to the iTP WebServer port via firewall or stop the service.
AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
A vulnerability in HPE NonStop iTP WebServer can cause memory corruption and system shutdown.