CVE-2026-79837
7.3HighPublished 15 Oct 2026 · NVD status: Awaiting Analysis · AI triage by gemini-3.8-flash
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
- Impact
- High impact on availability
- Weakness
- CWE-20
Impact
A local authenticated attacker can crash the service or corrupt process memory by sending a crafted message. This leads to service disruption and undefined behavior in the SQL/MX UDR server environment.
Root cause
Improper input validation in HPE NonStop SQL/MX UDR SERVER allows malformed messages to trigger process termination or memory corruption.
Affected systems
Versions not listed — check the vendor advisory.
CVSS v3.1 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:H
Fix & remediation
Consult HPE Security Advisory hpesbns05148en_us for the official patch or target SPR; if immediate patching is not possible, restrict local access to the SQL/MX UDR server process.
AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
A vulnerability in HPE NonStop SQL/MX UDR SERVER may allow a crafted message to cause process termination, service disruption or memory corruption, resulting in undefined behavior.