CVE-2026-79821
8.2HighPublished 15 Oct 2026 · NVD status: Awaiting Analysis · AI triage by gemini-3.8-flash
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
- Impact
- High impact on availability
- Weakness
- CWE-20
Impact
Unauthenticated network attackers can cause memory corruption leading to complete system downtime. They do not need credentials or user interaction to trigger it.
Root cause
Improper input validation in HPE NonStop SOAP triggers memory corruption and crashes the system.
Affected systems
HPE NonStop SOAP 4.0; specific build numbers are not listed — check the vendor advisory.
CVSS v3.1 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
Fix & remediation
Check the HPE advisory (hpesbns05148en_us) for the targeted patch or update. As an immediate workaround, restrict network access to the SOAP service port or stop the service if feasible.
AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
A security vulnerability in HPE NonStop SOAP 4.0 may cause memory corruption resulting in a system down.