CVE-2026-73787

HighCVSS 7.2/10Last modified Sep 11, 2026

Description

A vulnerability in the CPPM web interface could allow an authenticated remote attacker to access directory information on a vulnerable system. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.

Metrics

CVSS 3.1 7.2/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-78

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published
Sep 9, 2026
Last modified
Sep 11, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-737886.5A vulnerability in the ClearPass OnGuard agent could allow an authenticated remote attacker to elevate their own privileges on a vulnerable CVE-2026-737895.3A vulnerability in the web-based management interface of CPPM guest account management services could allow an unauthenticated remote attackCVE-2026-73797.5Memory leak in sharkd 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of serviceCVE-2026-737908.2A vulnerability in HPE NonStop iTP WebServer can cause memory corruption and system shutdown.CVE-2026-737912.0A security vulnerability in HPE NonStop Hpjmeter can cause stack and heap buffer overflow.CVE-2026-737923.8A security vulnerability in HPE NonStop Java JToolkit can allow command Injection and buffer overflow.CVE-2026-737937.9HPE NonStop Middleware software has secret key handling and data deserialization vulnerability.CVE-2026-737944.6HPE NonStop MODULAR NSJ  contains a predictable seed vulnerability in Random Number Generation (PRNG)CVE-2026-737956.4A security vulnerability in HPE NonStop TMF Auditread2 can cause  Denial of Service.CVE-2026-737964.4A security vulnerability in HPE NonStop TSQLEXE may cause application crash via a crafted SQL query.CVE-2026-737975.3A security vulnerability in HPE NonStop TSQLFIL may cause address space corruption when a specific API is called.CVE-2026-737988.2A security vulnerability in HPE NonStop DNS 9.2.3 Non Secure Version could cause a Denial of Service.