CVE-2026-79837 PUBLISHED

HPE NonStop SQL/MX UDR SERVER - Service disruption vulnerability

Assigner: hpe
Reserved: 25.08.2026 Published: 15.10.2026 Updated: 15.10.2026

A vulnerability in HPE NonStop SQL/MX UDR SERVER may allow a crafted message to cause process termination, service disruption or memory corruption, resulting in undefined behavior.

Metrics

CVSS 3.1

CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:H
CVSS Score: 7.3

Attack Vector	Local	Scope	Changed
Attack Complexity	Low	Confidentiality Impact	None
Privileges Required	Low	Integrity Impact	Low
User Interaction	None	Availability Impact	High

CVSS 3.1

Product Status

Vendor	Hewlett Packard Enterprise
Product	HPE NonStop SQL/MX UDR SERVER
Versions	Default: affected Version T1230L40 and earlier is affected

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbns05148en_us&docLocale=en_US

Problem Types

CWE-20 Improper input validation CWE

Impacts

CAPEC-123 Buffer Manipulation