Description
HPE NonStop EMS Distributor is vulnerable to buffer overflow condition that may result in undesirable behavior.
Published: 2026-10-15
Score: 4 Medium
EPSS: < 1% Very Low
KEV: No
Impact: Memory corruption
Action: Monitor
AI Analysis

Impact

A buffer overflow condition was identified in HPE NonStop EMS Distributor, potentially leading to memory corruption and other undesirable behaviors. The vulnerability is classified as CWE‑121 and could allow an attacker to corrupt the runtime memory of the distribution service, potentially causing crashes, incorrect processing, or other unstable conditions.

Affected Systems

The affected product is Hewlett Packard Enterprise’s HPE NonStop EMS Distributor. No specific version information is listed in the input.

Risk and Exploitability

The CVSS score of 4.0 indicates a low severity impact. The EPSS score of <1% suggests a very low probability of exploitation. This vulnerability is not listed in the CISA KEV catalog, and based on the provided description, no specific attack vector is disclosed; it is inferred that exploitation would likely require reach into the EMS Distributor environment.

Generated by OpenCVE AI on October 22, 2026 at 23:41 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Obtain from HPE the latest patch or firmware update for the NonStop EMS Distributor that addresses the buffer overflow condition
  • If a patch is not immediately available, isolate or restrict network access to the EMS Distributor service to limit potential exploitation pathways
  • Monitor system and network logs for anomalous activity that could indicate an attempted exploitation of memory corruption issues

Generated by OpenCVE AI on October 22, 2026 at 23:41 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 21 Oct 2026 20:45:00 +0000

Type Values Removed Values Added
First Time appeared Hpe
Hpe nonstop Ems Distributor
Vendors & Products Hpe
Hpe nonstop Ems Distributor

Thu, 15 Oct 2026 14:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Thu, 15 Oct 2026 13:30:00 +0000

Type Values Removed Values Added
Description HPE NonStop EMS Distributor is vulnerable to buffer overflow condition that may result in undesirable behavior.
Title HPE NonStop EMS Distributor - Buffer Overflow vulnerability
Weaknesses CWE-121
References
Metrics cvssV3_1

{'score': 4, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L'}


Subscriptions

Hpe Nonstop Ems Distributor
cve-icon MITRE

Status: PUBLISHED

Assigner: hpe

Published:

Updated: 2026-10-15T13:46:58.729Z

Reserved: 2026-08-25T14:46:40.580Z

Link: CVE-2026-79823

cve-icon Vulnrichment

Updated: 2026-10-15T13:46:54.496Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-10-15T09:17:18.707

Modified: 2026-10-15T16:23:06.250

Link: CVE-2026-79823

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-22T23:45:13Z

Weaknesses
  • CWE-121

    Stack-based Buffer Overflow