CVE-2026-79840: HPE NonStop XABroker - Memory corruption vulnerability
A buffer overflow vulnerability in HPE NonStop XABroker may cause memory corruption, resulting in application crash.
Affected Software
Event History
Frequently Asked Questions
What level of access does an attacker need to exploit this issue?
The vulnerability has local attack vector (AV:L) and requires low privileges (PR:L). It also requires user interaction (UI:R), so it is not described as remotely exploitable without local access.
What is the likely impact if exploitation succeeds?
The stated outcome is memory corruption that can crash the affected application. The supplied severity vector also indicates potential low confidentiality and integrity impact, high availability impact, and impact beyond the vulnerable security authority (S:C).
How can I determine whether my environment may be affected?
Review whether HPE NonStop XABroker is installed in your environment. The provided data does not identify affected versions, fixed versions, configuration conditions, or detection indicators.