CVE-2026-79834
7.4HighPublished 15 Oct 2026 · NVD status: Awaiting Analysis · AI triage by gemini-3.8-flash
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
- Impact
- Limited impact
- Weakness
- CWE-20
Impact
Remote attackers can execute unauthorized commands on the system. They require network access to the HPE NonStop SQL/MX SQLCAT service.
Root cause
Improper input validation (CWE-20) in the SQLCAT component allows command injection or execution.
Affected systems
HPE NonStop SQL/MX SQLCAT (exact versions not listed in advisory data — check vendor bulletin).
CVSS v3.1 · CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L
Fix & remediation
Check the HPE security bulletin hpesbns05148en_us for the official patch; restrict or block network access to SQLCAT endpoints if immediate patching is not possible.
AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
A security vulnerability in HPE NonStop SQL/MX SQLCAT may allow an unauthenticated user to perform unauthorized command execution.