CVE-2026-79839
7.3HighPublished 15 Oct 2026 · NVD status: Awaiting Analysis · AI triage by gemini-3.8-flash
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- Required
- Impact
- High impact on availability
- Weakness
- CWE-121
Impact
Local authenticated users can cause memory corruption and crash the application, with potential limited data exposure or tampering, if a user is tricked into interacting with it. Attackers need local system access and user interaction to trigger the bug.
Root cause
A stack-based buffer overflow in the service corrupts memory during processing.
Affected systems
HPE NonStop ODBC/MX Server; specific affected versions not listed — check the vendor advisory.
CVSS v3.1 · CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:H
Fix & remediation
Check the HPE security bulletin hpesbns05148en_us for the patch or updated version to install; restrict local user access to the server environment until patched.
AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
A buffer overflow vulnerability in HPE NonStop ODBC/MX Server may cause memory corruption, resulting in application crash.