CVE-2026-79829
8.2HighPublished 15 Oct 2026 · NVD status: Awaiting Analysis · AI triage by gemini-3.8-flash
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
- Impact
- High impact on availability
- Weakness
- CWE-20
Impact
Remote, unauthenticated attackers can cause memory corruption and crash the host into a complete system halt. They only need network access to the HTTP server port.
Root cause
Improper input validation leads to memory corruption in the HTTP server process.
Affected systems
Versions not listed — check the vendor advisory.
CVSS v3.1 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
Fix & remediation
Review HPE advisory hpesbns05148en_us for the fixed NonStop SPR package. If you cannot patch immediately, restrict network access to the web server port to trusted hosts only.
AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
A security vulnerability in HPE NonStop HTTP WEBSERVER can cause memory corruption which may result in a system halt.