CVE-2026-79840
7.3HighPublished 15 Oct 2026 · NVD status: Awaiting Analysis · AI triage by gemini-3.8-flash
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- Required
- Impact
- High impact on availability
- Weakness
- CWE-121
Impact
A local attacker can crash HPE NonStop XABroker and potentially cause memory corruption, but requires local access and user interaction. This can degrade availability and potentially impact neighboring system components.
Root cause
A stack-based buffer overflow in HPE NonStop XABroker leads to memory corruption.
Affected systems
Versions not listed — check the vendor advisory.
CVSS v3.1 · CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:H
Fix & remediation
Consult HPE security bulletin hpesbns05148en_us for the fixed release or patch; if immediate patching is not possible, restrict local access to the HPE NonStop host.
AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
A buffer overflow vulnerability in HPE NonStop XABroker may cause memory corruption, resulting in application crash.