CVE-2026-73793
7.9HighPublished 14 Oct 2026 · NVD status: Awaiting Analysis · AI triage by gemini-3.8-flash
- Attack vector
- Network
- Complexity
- High
- Privileges needed
- High
- User interaction
- None
- Impact
- High impact on integrity, availability
- Weakness
- CWE-502
Impact
High-privileged network attackers can compromise data integrity and disrupt services, potentially executing arbitrary code or escaping scope. They need existing high-privilege credentials and network access to the target middleware.
Root cause
Insecure deserialization of untrusted data combined with improper handling of secret keys.
Affected systems
Versions not listed — check the vendor advisory.
CVSS v3.1 · CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:H/A:H
Fix & remediation
Consult HPE security bulletin hpesbns05148en_us for the specific software update or SPR; as an interim measure, restrict network access to NonStop Middleware management endpoints to trusted administrative networks.
AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
HPE NonStop Middleware software has secret key handling and data deserialization vulnerability.