CVE-2026-73793— HPE NonStop Middleware - Secret key handling vulnerability
Quick assessment
Affected
Hewlett Packard Enterprise HPE NonStop Middleware
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
HPE NonStop Middleware software has secret key handling and data deserialization vulnerability.
Affected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Hewlett Packard Enterprise | HPE NonStop Middleware | T1155L01^AAF and earlier |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-73793
Vulnerability Information
Shenlong is analyzing...
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
HPE NonStop Middleware - Secret key handling vulnerability
Source: CVE Program / CVE List V5
Vulnerability Description
HPE NonStop Middleware software has secret key handling and data deserialization vulnerability.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
可信数据的反序列化
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Hewlett Packard Enterprise | HPE NonStop Middleware | T1155L01^AAF and earlier | - |
|
II. Public POCs for CVE-2026-73793
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-73793
请登录查看更多情报信息。
Other References for CVE-2026-73793 (1)
Same Patch Batch · Hewlett Packard Enterprise · 2026-10-14 · 10 CVEs total
| CVE-2026-73790 | 8.2 HIGH | HPE NonStop iTP WebServer - Memory corruption vulnerability |
| CVE-2026-73798 | 8.2 HIGH | HPE NonStop DNS 9.2.3 Non Secure Version |
| CVE-2026-76655 | 7.5 HIGH | HPE NonStop SNMP Trap Multiplexer - Buffer Overflow vulnerability |
| CVE-2026-73795 | 6.4 MEDIUM | HPE NonStop TMF Auditread2 - Denial of Service vulnerability |
| CVE-2026-73797 | 5.3 MEDIUM | HPE NonStop TSQLFIL - Memory corruption vulnerability |
| CVE-2026-73794 | 4.6 MEDIUM | HPE NonStop MODULAR NSJ - Vulnerability in Random Number Generation |
| CVE-2026-73796 | 4.4 MEDIUM | HPE NonStop TSQLEXE - Memory Corruption vulnerability |
| CVE-2026-73792 | 3.8 LOW | HPE NonStop Java JToolkit - Command Injection and buffer overflow vulnerability |
| CVE-2026-73791 | 2.0 LOW | HPE NonStop Hpjmeter - Buffer overflow vulnerability |
IV. Related Vulnerabilities
Same vendor: Hewlett Packard Enterprise
-
CVE-2026-79841
HPE NonStop RDMA SERVICES NSK - Out-of-bounds memory write v -
CVE-2026-79840
HPE NonStop XABroker - Memory corruption vulnerability -
CVE-2026-79839
HPE NonStop ODBC/MX Server - Memory corruption vulnerability -
CVE-2026-79838
HPE NonStop ODBC/MX Services - Memory corruption vulnerabili -
CVE-2026-79837
HPE NonStop SQL/MX UDR SERVER - Service disruption vulnerabi
Same weakness: CWE-502
-
CVE-2026-47168
EspoCRM: Authenticated RCE via Unsafe PHP Object Deserializa -
CVE-2026-109686
WordPress Link Whisper Free plugin <= 0.9.7 - PHP Object Inj -
CVE-2026-110761
ILIAS before 9.24, 10.12, and 11.5 PHP Object Injection via -
CVE-2026-55573
e107: Unsafe deserialization in install.php allows unauthent -
CVE-2026-108291
WordPress Affiliates plugin <= 7.0.1 - PHP Object Injection
V. Comments for CVE-2026-73793
No comments yet