CVE-2026-76666

MediumCVSS 4.7/10Last modified Oct 15, 2026

Description

A security vulnerability in HPE NonStop EXPAND may result in out-of-bounds memory read.

Metrics

CVSS 3.1 4.7/10CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:L

Weakness enumeration

CWE-125

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published
Oct 15, 2026
Last modified
Oct 15, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-766675.7A security vulnerability in HPE NonStop EXPAND may result in out-of-bounds memory read.CVE-2026-766686.3A security vulnerability in HPE NonStop Kernel may allow user space access to privileged or unmapped data.CVE-2026-766699.9Privilege escalation vulnerabilities exist in the API of HPE Networking EdgeConnect SD-WAN Orchestrator. Successful exploitation could allowCVE-2026-76678.8IBM Langflow OSS 1.0.0 through 1.10.0 allows an authenticated attacker to create a malicious flow pointing to an attacker-controlled URL thaCVE-2026-766709.9Privilege escalation vulnerabilities exist in the API of HPE Networking EdgeConnect SD-WAN Orchestrator. Successful exploitation could allowCVE-2026-766729.9A vulnerability exists in the SD-WAN Orchestrator that may lead to the exposure of sensitive configuration information. An authenticated remCVE-2026-766739.8Vulnerabilities have been identified in the API of EdgeConnect SD-WAN Orchestrator that could potentially allow an unauthenticated remote acCVE-2026-766749.8Buffer overflow vulnerabilities exist in the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways that could allow an uCVE-2026-766759.1A command injection vulnerability exists in the command line interface of EdgeConnect SD-WAN Gateways. Successful exploitation could allow aCVE-2026-766768.8Buffer overflow vulnerabilities exist in the underlying operating system of EdgeConnect SD-WAN Gateways that could allow an unauthenticated CVE-2026-766778.8A privilege escalation vulnerability exists in the API of EdgeConnect SD-WAN Gateways. Successful exploitation could allow a remote low-privCVE-2026-766788.8A vulnerability in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways could allow a low-privilege authenticated remote attacker
CVE-2026-76666: Medium severity, CVSS 4.7 | Vulnix