Description
A buffer overflow vulnerability in HPE NonStop XABroker may cause memory corruption, resulting in application crash.
Published: 2026-10-15
Score: 7.3 High
EPSS: < 1% Very Low
KEV: No
Impact: Denial of Service
Action: Patch
AI Analysis

Impact

A buffer overflow flaw exists in HPE NonStop XABroker that can corrupt memory and cause the application to crash. The vulnerability is a classic stack-based buffer overflow (CWE-121) and its primary consequence is a denial of service, which may also create a vector for further exploitation if memory corruption is leveraged by an attacker.

Affected Systems

The affected product is Hewlett Packard Enterprise HPE NonStop XABroker. No specific affected version is cited, so all releases may be vulnerable until a patch is applied.

Risk and Exploitability

The CVSS score of 7.3 indicates moderate to high severity. The EPSS score of less than 1% suggests a very low likelihood of exploitation observed historically. The vulnerability is not listed in the CISA KEV catalog. Based on the description, it is inferred that the attack requires sending specially crafted input to the XABroker service, and the exploitability depends on the ability to reach that service, but no specific remote or local boundary is disclosed.

Generated by OpenCVE AI on October 16, 2026 at 20:56 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Apply the latest HPE NonStop XABroker patch or upgrade to a later, fixed release
  • Restrict network access to the XABroker service to trusted hosts or VPNs only
  • Monitor XABroker logs and system stability for signs of abnormal crashes or exploitation attempts
  • Follow HPE advisories for any additional configurations or mitigations

Generated by OpenCVE AI on October 16, 2026 at 20:56 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Fri, 23 Oct 2026 00:45:00 +0000

Type Values Removed Values Added
First Time appeared Hpe
Hpe nonstop Xabroker
Vendors & Products Hpe
Hpe nonstop Xabroker

Thu, 15 Oct 2026 19:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Thu, 15 Oct 2026 15:00:00 +0000

Type Values Removed Values Added
Description A buffer overflow vulnerability in HPE NonStop XABroker may cause memory corruption, resulting in application crash.
Title HPE NonStop XABroker - Memory corruption vulnerability
Weaknesses CWE-121
References
Metrics cvssV3_1

{'score': 7.3, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:H'}

Subscriptions

Hpe Nonstop Xabroker
cve-icon MITRE

Status: PUBLISHED

Assigner: hpe

Published:

Updated: 2026-10-15T18:08:45.467Z

Reserved: 2026-08-25T14:47:15.581Z

Link: CVE-2026-79840

cve-icon Vulnrichment

Updated: 2026-10-15T18:08:40.251Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-10-15T15:17:37.810

Modified: 2026-10-15T19:17:44.227

Link: CVE-2026-79840

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-22T21:19:46Z

Weaknesses
  • CWE-121

    Stack-based Buffer Overflow