Description
A vulnerability in HPE NonStop iTP WebServer can cause memory corruption and system shutdown.
Published: 2026-10-14
Score: 8.2 High
EPSS: < 1% Very Low
KEV: No
Impact: Denial of Service via memory corruption leading to system shutdown
Action: Apply Patch
AI Analysis

Impact

A flaw in HPE NonStop iTP WebServer can corrupt memory and force the system to shut down. The memory corruption may allow an attacker to overwrite critical data structures, potentially leading to a crash. Because the result is a system shutdown, the primary impact is availability loss and disruption of services that rely on the WebServer.

Affected Systems

Hewlett Packard Enterprise’s NonStop iTP WebServer is the only product listed as affected. No specific version information is provided in the available data.

Risk and Exploitability

The CVSS score is 8.2, indicating a high severity. The EPSS score is below 1 %, showing that real‑world exploitation is currently unlikely. The vulnerability is not listed in the CISA KEV catalog. Based on the description, the likely attack vector is through a web request that targets the compromised WebServer, but the exact exploitation steps are not detailed in the given information.

Generated by OpenCVE AI on October 15, 2026 at 23:54 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Contact HPE to obtain and install the latest firmware or patch for the NonStop iTP WebServer that addresses the memory corruption flaw
  • Restrict inbound traffic to the WebServer by applying firewall rules or access control lists to limit connections to trusted IP addresses
  • Regularly monitor system logs and event alerts for signs of unexpected shutdowns or abnormal memory usage related to the WebServer

Generated by OpenCVE AI on October 15, 2026 at 23:54 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 14 Oct 2026 15:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Wed, 14 Oct 2026 08:45:00 +0000

Type Values Removed Values Added
Description A vulnerability in HPE NonStop iTP WebServer can cause memory corruption and system shutdown.
Title HPE NonStop iTP WebServer - Memory corruption vulnerability
Weaknesses CWE-20
References
Metrics cvssV3_1

{'score': 8.2, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H'}


Subscriptions

No data.

cve-icon MITRE

Status: PUBLISHED

Assigner: hpe

Published:

Updated: 2026-10-14T14:14:19.983Z

Reserved: 2026-08-13T16:39:53.235Z

Link: CVE-2026-73790

cve-icon Vulnrichment

Updated: 2026-10-14T14:14:14.183Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-10-14T09:17:22.613

Modified: 2026-10-14T16:08:15.347

Link: CVE-2026-73790

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-16T00:00:16Z

Weaknesses
  • CWE-20

    Improper Input Validation