CVE-2026-76660
8.7HighPublished 15 Oct 2026 · NVD status: Awaiting Analysis · AI triage by gemini-3.8-flash
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
- Impact
- High impact on integrity, availability
- Weakness
- CWE-20
Impact
A local attacker with an account can corrupt memory across execution boundaries to compromise system integrity and cause denial of service. They require local access to the HPE NonStop system.
Root cause
An out-of-bounds write flaw in CIPSAM allows input to overwrite adjacent buffer memory.
Affected systems
Versions not listed — check the vendor advisory.
CVSS v3.1 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:H
Fix & remediation
Consult HPE security advisory hpesbns05148en_us to obtain the patched CIPSAM package release; no interim workaround is documented.
AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
A vulnerability in HPE NonStop CIPSAM allows an out-of-bounds write that can corrupt buffer data.