CVE-2026-79826
7.1HighPublished 15 Oct 2026 · NVD status: Awaiting Analysis · AI triage by gemini-3.8-flash
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
- Impact
- High impact on integrity, availability
- Weakness
- CWE-122
Impact
A local attacker with an existing account can trigger integrity loss or denial of service by corrupting memory and potentially hijacking execution flow. They must have local system access to exploit the issue.
Root cause
A heap-based buffer overflow in HPE NonStop OCAX allows heap corruption.
Affected systems
Versions not listed — check the vendor advisory.
CVSS v3.1 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Fix & remediation
Consult HPE security advisory hpesbns05148en_us for the patched OCAX software package and apply the vendor-provided release. If immediate patching is not possible, restrict local account access to affected HPE NonStop systems.
AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
A heap buffer overflow in HPE NonStop OCAX could corrupt address space and may potentially redirect execution flow.