CVE-2026-73793

HighCVSS 7.9/10Last modified Oct 14, 2026

Description

HPE NonStop Middleware software has secret key handling and data deserialization vulnerability.

Metrics

CVSS 3.1 7.9/10CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:H/A:H

Weakness enumeration

CWE-502

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
Hewlett Packard EnterpriseHPE NonStop MiddlewareT1155L01^AAF and earlier

References

Timeline

Published
Oct 14, 2026
Last modified
Oct 14, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-737944.6HPE NonStop MODULAR NSJ  contains a predictable seed vulnerability in Random Number Generation (PRNG)CVE-2026-737956.4A security vulnerability in HPE NonStop TMF Auditread2 can cause  Denial of Service.CVE-2026-737964.4A security vulnerability in HPE NonStop TSQLEXE may cause application crash via a crafted SQL query.CVE-2026-737975.3A security vulnerability in HPE NonStop TSQLFIL may cause address space corruption when a specific API is called.CVE-2026-737988.2A security vulnerability in HPE NonStop DNS 9.2.3 Non Secure Version could cause a Denial of Service.CVE-2026-737997.5A security vulnerability in HPE NonStop SNMP Trap Multiplexer may cause memory corruptionCVE-2026-73806.1Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in Armiya Information Technologies Ltd. Co. AcceCVE-2026-738008.8Gitea resolves local reusable workflow files from a fork's head commit when a trusted base-branch workflow runs for a pull_request_target evCVE-2026-738028.8Gitea Runner passes workflow-controlled container options into Docker job container configuration while privileged mode is disabled. Host naCVE-2026-738048.1Gitea allows a token with write:user scope to register an attacker-controlled SSH public key on the token owner's account. API requests signCVE-2026-738079.8The mySCADA myPRO Manager command API does not properly enforce authentication for privileged functions. An unauthenticated attacker with neCVE-2026-738097.5A cleartext transmission of sensitive information vulnerability exists in certain Ebyte gateway products. The web management interface does
CVE-2026-73793: High severity, CVSS 7.9 | Vulnix