CVE-2026-79834 PUBLISHED

HPE NonStop SQL/MX SQLCAT - Unauthorized command execution vulnerability

Assigner: hpe
Reserved: 25.08.2026 Published: 15.10.2026 Updated: 15.10.2026

A security vulnerability in HPE NonStop SQL/MX SQLCAT may allow an unauthenticated user to perform unauthorized command execution.

Metrics

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L
CVSS Score: 7.4

Product Status

Vendor Hewlett Packard Enterprise
Product HPE NonStop SQL/MX SQLCAT
Versions Default: affected
  • Version T1055L40 and earlier is affected

References

Problem Types

  • CWE-20 Improper input validation CWE

Impacts

  • CAPEC-88 OS Command Injection