First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2026-73790

HighCVSS 8.2/10Last modified Oct 14, 2026

Description

A vulnerability in HPE NonStop iTP WebServer can cause memory corruption and system shutdown.

Metrics

CVSS 3.1 8.2/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

Weakness enumeration

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

Vendor	Product	Versions
Hewlett Packard Enterprise	HPE NonStop iTP WebServer	Prior to T8996L01^AGZ; Prior to T8997L01^AGZ

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbns05148en_us&docLocale=en_US

Timeline

Published: Oct 14, 2026
Last modified: Oct 14, 2026
NVD status: Awaiting Analysis

Related CVEs from 2026

CVE-2026-737912.0A security vulnerability in HPE NonStop Hpjmeter can cause stack and heap buffer overflow.CVE-2026-737923.8A security vulnerability in HPE NonStop Java JToolkit can allow command Injection and buffer overflow.CVE-2026-737937.9HPE NonStop Middleware software has secret key handling and data deserialization vulnerability.CVE-2026-737944.6HPE NonStop MODULAR NSJ contains a predictable seed vulnerability in Random Number Generation (PRNG)CVE-2026-737956.4A security vulnerability in HPE NonStop TMF Auditread2 can cause Denial of Service.CVE-2026-737964.4A security vulnerability in HPE NonStop TSQLEXE may cause application crash via a crafted SQL query.CVE-2026-737975.3A security vulnerability in HPE NonStop TSQLFIL may cause address space corruption when a specific API is called.CVE-2026-737988.2A security vulnerability in HPE NonStop DNS 9.2.3 Non Secure Version could cause a Denial of Service.CVE-2026-737997.5A security vulnerability in HPE NonStop SNMP Trap Multiplexer may cause memory corruption CVE-2026-73806.1Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in Armiya Information Technologies Ltd. Co. Acce CVE-2026-738008.8Gitea resolves local reusable workflow files from a fork's head commit when a trusted base-branch workflow runs for a pull_request_target ev CVE-2026-738028.8Gitea Runner passes workflow-controlled container options into Docker job container configuration while privileged mode is disabled. Host na