Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-76666— HPE NonStop EXPAND - Out-of-Bounds memory read

Quick assessment

Affected
Hewlett Packard Enterprise HPE NonStop EXPAND
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

HPE NonStop EXPAND 中的安全漏洞可能导致内存越界读取。

CVSS 4.7 · Medium EPSS 0.10% · P1

Possible ATT&CK Techniques 1 AI

T1200 · Hardware Additions

Affected Version Matrix 1

VendorProduct Version RangeStatus
Hewlett Packard Enterprise HPE NonStop EXPAND T9057L02^AIG and earlier affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-76666

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
HPE NonStop EXPAND - Out-of-Bounds memory read
Source: CVE Program / CVE List V5
Vulnerability Description
A security vulnerability in HPE NonStop EXPAND may result in out-of-bounds memory read.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
跨界内存读
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
Hewlett Packard Enterprise HPE NonStop EXPAND T9057L02^AIG and earlier -

II. Public POCs for CVE-2026-76666

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-76666

请登录查看更多情报信息。

Other References for CVE-2026-76666 (1)

Same Patch Batch · Hewlett Packard Enterprise · 2026-10-15 · 34 CVEs total

CVE-2026-76660 8.7 HIGH HPE NonStop CIPSAM - Memory corruption vulnerability
CVE-2026-79829 8.2 HIGH HPE NonStop HTTP WEBSERVER - Memory corruption vulnerability
CVE-2026-79821 8.2 HIGH HPE NonStop SOAP 4.0 - Memory corruption
CVE-2026-79824 8.0 HIGH HPE NonStop Python 3.x - Directory traversal vulnerability
CVE-2026-76661 7.6 HIGH HPE NonStop QIOMON - Memory corruption vulnerability
CVE-2026-79832 7.6 HIGH HPE NonStop SQL/MX Executor - Buffer overflow vulnerability
CVE-2026-79833 7.5 HIGH HPE NonStop ANSI SQLUTIL - Denial of Service vulnerability
CVE-2026-76663 7.5 HIGH HPE NonStop TELSERV - Memory corruption vulnerability
CVE-2026-76659 7.5 HIGH HPE NonStop TCP/IP UTILITIES - Denial of Service vulnerability
CVE-2026-73799 7.5 HIGH HPE NonStop SNMP Trap Multiplexer - Memory Corruption vulnerability
CVE-2026-79834 7.4 HIGH HPE NonStop SQL/MX SQLCAT - Unauthorized command execution vulnerability
CVE-2026-79839 7.3 HIGH HPE NonStop ODBC/MX Server - Memory corruption vulnerability
CVE-2026-79840 7.3 HIGH HPE NonStop XABroker - Memory corruption vulnerability
CVE-2026-79837 7.3 HIGH HPE NonStop SQL/MX UDR SERVER - Service disruption vulnerability
CVE-2026-79838 7.3 HIGH HPE NonStop ODBC/MX Services - Memory corruption vulnerability
CVE-2026-79822 7.1 HIGH HPE NonStop TNS/X Native Inspect - Execution flow vulnerability
CVE-2026-79828 7.1 HIGH HPE NonStop Debug Utilities - Heap buffer overflow vulnerability
CVE-2026-79827 7.1 HIGH HPE NonStop Inspect Subsystem - Heap buffer overflow vulnerability
CVE-2026-79826 7.1 HIGH HPE NonStop OCAX - Heap buffer overflow vulnerability
CVE-2026-79825 7.1 HIGH HPE NonStop NDSREST - Heap buffer overflow vulnerability

Showing top 20 of 34 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: HPE NonStop EXPAND
Same vendor: Hewlett Packard Enterprise
Same weakness: CWE-125

V. Comments for CVE-2026-76666

No comments yet

Leave a comment