CVE-2026-73797

MediumCVSS 5.3/10Last modified Oct 14, 2026

Description

A security vulnerability in HPE NonStop TSQLFIL may cause address space corruption when a specific API is called.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H

Weakness enumeration

CWE-475

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
Hewlett Packard EnterpriseHPE NonStop TSQLFILT9196L01^AGI and earlier; T9196L02

References

Timeline

Published
Oct 14, 2026
Last modified
Oct 14, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-737988.2A security vulnerability in HPE NonStop DNS 9.2.3 Non Secure Version could cause a Denial of Service.CVE-2026-737997.5A security vulnerability in HPE NonStop SNMP Trap Multiplexer may cause memory corruptionCVE-2026-73806.1Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in Armiya Information Technologies Ltd. Co. AcceCVE-2026-738008.8Gitea resolves local reusable workflow files from a fork's head commit when a trusted base-branch workflow runs for a pull_request_target evCVE-2026-738028.8Gitea Runner passes workflow-controlled container options into Docker job container configuration while privileged mode is disabled. Host naCVE-2026-738048.1Gitea allows a token with write:user scope to register an attacker-controlled SSH public key on the token owner's account. API requests signCVE-2026-738079.8The mySCADA myPRO Manager command API does not properly enforce authentication for privileged functions. An unauthenticated attacker with neCVE-2026-738097.5A cleartext transmission of sensitive information vulnerability exists in certain Ebyte gateway products. The web management interface doesCVE-2026-73819.1Plack::Middleware::XSendfile versions through 1.0053 for Perl can allow client-controlled path rewriting. Plack::Middleware::XSendfile alloCVE-2026-738128.3httpd function check_header/3 rejects duplicate Content-Length (per CVE-2026-23941) but never checks for the TE+CL co-presence that RFC 9112CVE-2026-738146.5Gitea's collaboration access-mode endpoint accepts the Owner access mode from an authenticated repository collaborator with Admin access. ThCVE-2026-738199.8The affected Ebyte product's vendor configuration utility permits access to administrative functions without verifying the operator's ide
CVE-2026-73797: Medium severity, CVSS 5.3 | Vulnix