Description
A vulnerability in HPE NonStop SQL/MX UDR SERVER may allow a crafted message to cause process termination, service disruption or memory corruption, resulting in undefined behavior.
Published: 2026-10-15
Score: 7.3 High
EPSS: < 1% Very Low
KEV: No
Impact: Denial of Service
Action: Patch immediately
AI Analysis

Impact

A flaw in HPE NonStop SQL/MX UDR SERVER permits a maliciously crafted message to trigger termination of the SQL/MX process, leading to service disruption, possible memory corruption, and undefined behavior. The vulnerability is rooted in improper input validation (CWE‑20).

Affected Systems

The bug affects Hewlett Packard Enterprise's NonStop SQL/MX UDR SERVER product. No specific version numbers are listed in the advisory, so any deployment of the product that has not applied the latest update may be vulnerable.

Risk and Exploitability

The CVSS base score of 7.3 indicates a high severity for availability, while the EPSS score below 1% reflects a low but non‑zero likelihood of exploitation. The vulnerability is not present in the CISA KEV catalog. The likely attack vector is a network‑based message delivered to the SQL/MX service; the attack requires the ability to send crafted messages, but no specialized privileges are mentioned in the description.

Generated by OpenCVE AI on October 16, 2026 at 21:20 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Download and apply the HPE patch that addresses CVE‑2026‑79837, ensuring the installed version includes the fix.
  • If a patch is not immediately available, restrict the SQL/MX server to only trusted sources and close any unused management ports to reduce exposure.
  • Enable monitoring for unexpected process crashes and review logs for signs of malformed requests; consider implementing a network firewall rule to filter suspicious traffic.

Generated by OpenCVE AI on October 16, 2026 at 21:20 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 27 Oct 2026 04:30:00 +0000

Type Values Removed Values Added
First Time appeared Hpe
Hpe nonstop Sql/mx Udr Server
Vendors & Products Hpe
Hpe nonstop Sql/mx Udr Server

Thu, 15 Oct 2026 14:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Thu, 15 Oct 2026 13:30:00 +0000

Type Values Removed Values Added
Description A vulnerability in HPE NonStop SQL/MX UDR SERVER may allow a crafted message to cause process termination, service disruption or memory corruption, resulting in undefined behavior.
Title HPE NonStop SQL/MX UDR SERVER - Service disruption vulnerability
Weaknesses CWE-20
References
Metrics cvssV3_1

{'score': 7.3, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:H'}

Subscriptions

Hpe Nonstop Sql/mx Udr Server
cve-icon MITRE

Status: PUBLISHED

Assigner: hpe

Published:

Updated: 2026-10-15T13:12:36.817Z

Reserved: 2026-08-25T14:47:15.581Z

Link: CVE-2026-79837

cve-icon Vulnrichment

Updated: 2026-10-15T13:12:33.446Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-10-15T13:17:13.707

Modified: 2026-10-15T16:23:06.250

Link: CVE-2026-79837

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-26T22:37:03Z

Weaknesses
  • CWE-20

    Improper Input Validation