CVE-2026-76664

MediumCVSS 6.4/10Last modified Oct 15, 2026

Description

A security vulnerability in HPE NonStop EXPAND may result in out-of-bounds memory read/write operations

Metrics

CVSS 3.1 6.4/10CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H

Weakness enumeration

CWE-125

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published
Oct 15, 2026
Last modified
Oct 15, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-766657.1A security vulnerability in HPE NonStop EXPAND may cause out-of-bounds memory read resulting in buffer overflow.CVE-2026-766664.7A security vulnerability in HPE NonStop EXPAND may result in out-of-bounds memory read.CVE-2026-766675.7A security vulnerability in HPE NonStop EXPAND may result in out-of-bounds memory read.CVE-2026-766686.3A security vulnerability in HPE NonStop Kernel may allow user space access to privileged or unmapped data.CVE-2026-766699.9Privilege escalation vulnerabilities exist in the API of HPE Networking EdgeConnect SD-WAN Orchestrator. Successful exploitation could allowCVE-2026-76678.8IBM Langflow OSS 1.0.0 through 1.10.0 allows an authenticated attacker to create a malicious flow pointing to an attacker-controlled URL thaCVE-2026-766709.9Privilege escalation vulnerabilities exist in the API of HPE Networking EdgeConnect SD-WAN Orchestrator. Successful exploitation could allowCVE-2026-766729.9A vulnerability exists in the SD-WAN Orchestrator that may lead to the exposure of sensitive configuration information. An authenticated remCVE-2026-766739.8Vulnerabilities have been identified in the API of EdgeConnect SD-WAN Orchestrator that could potentially allow an unauthenticated remote acCVE-2026-766749.8Buffer overflow vulnerabilities exist in the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways that could allow an uCVE-2026-766759.1A command injection vulnerability exists in the command line interface of EdgeConnect SD-WAN Gateways. Successful exploitation could allow aCVE-2026-766768.8Buffer overflow vulnerabilities exist in the underlying operating system of EdgeConnect SD-WAN Gateways that could allow an unauthenticated
CVE-2026-76664: Medium severity, CVSS 6.4 | Vulnix