CVE-2026-79834: HPE NonStop SQL/MX SQLCAT - Unauthorized command execution vulnerability
Published Oct 15, 2026
·Updated
A security vulnerability in HPE NonStop SQL/MX SQLCAT may allow an unauthenticated user to perform unauthorized command execution.
Affected Software
1 affected component
HPE NonStop SQL/MX SQLCAT
Event History
Oct 15, 2026
CVE Published
via MITRE·11:23 AM
Data Sourced
via MITRE·11:23 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
The vulnerability is described as allowing an unauthenticated user to perform unauthorized command execution. The vector also indicates network access with low attack complexity and no user interaction.
2
What security impact can successful exploitation have?
The supplied severity vector indicates low impacts to confidentiality, integrity, and availability, with scope changed. The issue is rated high severity with a CVSS score of 7.4.