CVE-2026-76656 PUBLISHED

HPE NonStop TCP/IP UTILITIES - Denial of Service vulnerability

Assigner: hpe
Reserved: 19.08.2026 Published: 15.10.2026 Updated: 15.10.2026

A vulnerability in HPE NonStop TCP/IP UTILITIES could allow an unauthenticated remote attacker to cause a denial of service when traceroute is executed under certain conditions.

Metrics

CVSS 3.1

CVSS Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS Score: 5.3

Attack Vector	Network	Scope	Unchanged
Attack Complexity	High	Confidentiality Impact	None
Privileges Required	None	Integrity Impact	None
User Interaction	Required	Availability Impact	High

CVSS 3.1

Product Status

Vendor	Hewlett Packard Enterprise
Product	HPE NonStop TCP/IP UTILITIES
Versions	Default: affected Version T8602L01^BAA and earlier is affected

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbns05148en_us&docLocale=en_US

Problem Types

CWE-306 Missing authentication for critical function CWE

Impacts

CAPEC-469 HTTP DoS