First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2026-73792

LowCVSS 3.8/10Last modified Oct 14, 2026

Description

A security vulnerability in HPE NonStop Java JToolkit can allow command Injection and buffer overflow.

Metrics

CVSS 3.1 3.8/10CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:L

Weakness enumeration

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

Vendor	Product	Versions
Hewlett Packard Enterprise	HPE NonStop Java JToolkit	T2716L11^ABS and earlier

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbns05148en_us&docLocale=en_US

Timeline

Published: Oct 14, 2026
Last modified: Oct 14, 2026
NVD status: Awaiting Analysis

Related CVEs from 2026

CVE-2026-737937.9HPE NonStop Middleware software has secret key handling and data deserialization vulnerability.CVE-2026-737944.6HPE NonStop MODULAR NSJ contains a predictable seed vulnerability in Random Number Generation (PRNG)CVE-2026-737956.4A security vulnerability in HPE NonStop TMF Auditread2 can cause Denial of Service.CVE-2026-737964.4A security vulnerability in HPE NonStop TSQLEXE may cause application crash via a crafted SQL query.CVE-2026-737975.3A security vulnerability in HPE NonStop TSQLFIL may cause address space corruption when a specific API is called.CVE-2026-737988.2A security vulnerability in HPE NonStop DNS 9.2.3 Non Secure Version could cause a Denial of Service.CVE-2026-737997.5A security vulnerability in HPE NonStop SNMP Trap Multiplexer may cause memory corruption CVE-2026-73806.1Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in Armiya Information Technologies Ltd. Co. Acce CVE-2026-738008.8Gitea resolves local reusable workflow files from a fork's head commit when a trusted base-branch workflow runs for a pull_request_target ev CVE-2026-738028.8Gitea Runner passes workflow-controlled container options into Docker job container configuration while privileged mode is disabled. Host na CVE-2026-738048.1Gitea allows a token with write:user scope to register an attacker-controlled SSH public key on the token owner's account. API requests sign CVE-2026-738079.8The mySCADA myPRO Manager command API does not properly enforce authentication for privileged functions. An unauthenticated attacker with ne

CVE-2026-73792: Low severity, CVSS 3.8 | Vulnix