CVE-2026-76662 - Vulnerability Details

Description

A buffer overflow vulnerability in HPE NonStop TELSERV can cause memory corruption and DoS.

Published: 2026-10-15

Score: 5.9 Medium

EPSS: < 1% Very Low

KEV: No

Impact:

Action:

Analysis

Impact

A stack‑based buffer overflow in HPE NonStop TELSERV can corrupt memory, leading to a service outage. The vulnerability conforms to CWE‑121 and may cause the TELSERV service to terminate or become unresponsive, disrupting business continuity.

Affected Systems

The flaw affects Hewlett Packard Enterprise HPE NonStop TELSERV systems; no specific version impact is documented in the advisory.

Risk and Exploitability

The CVSS score of 5.9 indicates moderate severity. No EPSS score is available, and the vulnerability is not listed in the CISA KEV catalog, suggesting limited known exploitation. Based on the description, the likely attack vector involves an attacker sending crafted input to the vulnerable service over the network; no public exploit has been reported.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Hewlett Packard Enterprise

HPE NonStop TELSERV

affected

Version	Status	Constraints
`T9553L01^BAJ and earlier`	affected	—

No data.

No data available yet.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

Check the Hewlett Packard Enterprise support portal for any update or advisory addressing this vulnerability
If a patch is unavailable, isolate or restrict external network access to the TELSERV service using firewalls or ACLs
Monitor system logs and health metrics for signs of memory corruption or service crashes to detect exploitation attempts

Generated by OpenCVE AI on October 15, 2026 at 12:51 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

No CVSS v4.0

Attack Vector Network

Attack Complexity High

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00226.

Exploitation none

Automatable no

Technical Impact partial

References

Link	Providers
https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbns05148en_us&docLocale=en_US

History

Thu, 15 Oct 2026 16:30:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Thu, 15 Oct 2026 02:30:00 +0000

Type	Values Removed	Values Added
Description		A buffer overflow vulnerability in HPE NonStop TELSERV can cause memory corruption and DoS.
Title		HPE NonStop TELSERV - Memory corruption vulnerability
Weaknesses		CWE-121
References		https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbns05148en_us&docLocale=en_US
Metrics		cvssV3_1 `{'score': 5.9, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'}`

Subscriptions

No data.

MITRE

Status: PUBLISHED

Assigner: hpe

Published: 2026-10-15T02:11:54.726Z

Updated: 2026-10-15T15:17:07.624Z

Reserved: 2026-08-19T16:10:37.083Z

Link: CVE-2026-76662

Vulnrichment

Updated: 2026-10-15T15:14:39.272Z

NVD

Status : Awaiting Analysis

Published: 2026-10-15T03:17:11.117

Modified: 2026-10-15T16:23:06.250

Link: CVE-2026-76662

Redhat

No data.

OpenCVE Enrichment

Updated: 2026-10-15T13:00:18Z

Weaknesses

CWE-121
Stack-based Buffer Overflow

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-76662", "assignerOrgId": "eb103674-0d28-4225-80f8-39fb86215de0", "state": "PUBLISHED", "assignerShortName": "hpe", "dateReserved": "2026-08-19T16:10:37.083Z", "datePublished": "2026-10-15T02:11:54.726Z", "dateUpdated": "2026-10-15T15:17:07.624Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "eb103674-0d28-4225-80f8-39fb86215de0", "shortName": "hpe", "dateUpdated": "2026-10-15T02:11:54.726Z"}, "title": "HPE NonStop TELSERV - Memory corruption vulnerability", "datePublic": "2026-10-15T02:10:00.000Z", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-121", "description": "CWE-121 Stack-based buffer overflow", "type": "CWE"}]}], "impacts": [{"capecId": "CAPEC-456", "descriptions": [{"lang": "en", "value": "CAPEC-456 Infected Memory"}]}], "affected": [{"vendor": "Hewlett Packard Enterprise", "product": "HPE NonStop TELSERV", "versions": [{"status": "affected", "version": "T9553L01^BAJ and earlier"}], "defaultStatus": "affected"}], "descriptions": [{"lang": "en", "value": "A buffer overflow vulnerability in\u00a0HPE NonStop TELSERV can cause memory corruption and DoS.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "A buffer overflow vulnerability in HPE NonStop TELSERV can cause memory corruption and DoS."}]}], "references": [{"url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbns05148en_us&docLocale=en_US"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH", "baseSeverity": "MEDIUM", "baseScore": 5.9, "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"}}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 1.0.5"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-10-15T15:14:32.846485Z", "id": "CVE-2026-76662", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-15T15:17:07.624Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-76662", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-10-15T15:14:32.846485Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-15T15:14:39.272Z"}}], "cna": {"title": "HPE NonStop TELSERV - Memory corruption vulnerability", "source": {"discovery": "UNKNOWN"}, "impacts": [{"capecId": "CAPEC-456", "descriptions": [{"lang": "en", "value": "CAPEC-456 Infected Memory"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.9, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Hewlett Packard Enterprise", "product": "HPE NonStop TELSERV", "versions": [{"status": "affected", "version": "T9553L01^BAJ and earlier"}], "defaultStatus": "affected"}], "datePublic": "2026-10-15T02:10:00.000Z", "references": [{"url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbns05148en_us&docLocale=en_US"}], "x_generator": {"engine": "Vulnogram 1.0.5"}, "descriptions": [{"lang": "en", "value": "A buffer overflow vulnerability in\u00a0HPE NonStop TELSERV can cause memory corruption and DoS.", "supportingMedia": [{"type": "text/html", "value": "A buffer overflow vulnerability in HPE NonStop TELSERV can cause memory corruption and DoS.", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-121", "description": "CWE-121 Stack-based buffer overflow"}]}], "providerMetadata": {"orgId": "eb103674-0d28-4225-80f8-39fb86215de0", "shortName": "hpe", "dateUpdated": "2026-10-15T02:11:54.726Z"}}}, "cveMetadata": {"cveId": "CVE-2026-76662", "state": "PUBLISHED", "dateUpdated": "2026-10-15T15:17:07.624Z", "dateReserved": "2026-08-19T16:10:37.083Z", "assignerOrgId": "eb103674-0d28-4225-80f8-39fb86215de0", "datePublished": "2026-10-15T02:11:54.726Z", "assignerShortName": "hpe"}, "dataVersion": "5.2"}

Impact

Affected Systems

Risk and Exploitability

Tracking

Attack Vector Network

Attack Complexity High

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

Exploitation none

Automatable no

Technical Impact partial

Subscriptions

JSON object

JSON object

JSON object

JSON object

JSON object