CVE-2026-73798

HighCVSS 8.2/10Last modified Oct 14, 2026

Description

A security vulnerability in HPE NonStop DNS 9.2.3 Non Secure Version could cause a Denial of Service.

Metrics

CVSS 3.1 8.2/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

Weakness enumeration

CWE-115

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published
Oct 14, 2026
Last modified
Oct 14, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-737997.5A security vulnerability in HPE NonStop SNMP Trap Multiplexer may cause memory corruptionCVE-2026-73806.1Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in Armiya Information Technologies Ltd. Co. AcceCVE-2026-738008.8Gitea resolves local reusable workflow files from a fork's head commit when a trusted base-branch workflow runs for a pull_request_target evCVE-2026-738028.8Gitea Runner passes workflow-controlled container options into Docker job container configuration while privileged mode is disabled. Host naCVE-2026-738048.1Gitea allows a token with write:user scope to register an attacker-controlled SSH public key on the token owner's account. API requests signCVE-2026-738079.8The mySCADA myPRO Manager command API does not properly enforce authentication for privileged functions. An unauthenticated attacker with neCVE-2026-738097.5A cleartext transmission of sensitive information vulnerability exists in certain Ebyte gateway products. The web management interface doesCVE-2026-73819.1Plack::Middleware::XSendfile versions through 1.0053 for Perl can allow client-controlled path rewriting. Plack::Middleware::XSendfile alloCVE-2026-738128.3httpd function check_header/3 rejects duplicate Content-Length (per CVE-2026-23941) but never checks for the TE+CL co-presence that RFC 9112CVE-2026-738146.5Gitea's collaboration access-mode endpoint accepts the Owner access mode from an authenticated repository collaborator with Admin access. ThCVE-2026-738199.8The affected Ebyte product's vendor configuration utility permits access to administrative functions without verifying the operator's ideCVE-2026-73826.5Exposure of Sensitive Information to an Unauthorized Actor, Exposure of private personal information to an unauthorized actor vulnerability