Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-79824— HPE NonStop Python 3.x - Directory traversal vulnerability

Quick assessment

Affected
Hewlett Packard Enterprise HPE NonStop Python 3.x
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

HPE NonStop Python 3.x 中存在一个目录遍历漏洞，攻击者可能通过在 TAR 归档文件的文件名中使用“..”（双点）序列，从而覆盖任意文件。

CVSS 8.0 · High EPSS 0.48% · P40

Affected Version Matrix 1

VendorProduct Version RangeStatus
Hewlett Packard Enterprise HPE NonStop Python 3.x T0993L01^AAL and earlier affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-79824

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
HPE NonStop Python 3.x - Directory traversal vulnerability
Source: CVE Program / CVE List V5
Vulnerability Description
A directory traversal vulnerability in HPE NonStop Python 3.x could allow  attackers to overwrite arbitrary files via a .. (dot dot) sequence in filenames in a TAR archive.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
路径遍历：’dirfilename’
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
Hewlett Packard Enterprise HPE NonStop Python 3.x T0993L01^AAL and earlier -

II. Public POCs for CVE-2026-79824

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-79824

请登录查看更多情报信息。

Other References for CVE-2026-79824 (1)

Same Patch Batch · Hewlett Packard Enterprise · 2026-10-15 · 34 CVEs total

CVE-2026-76660 8.7 HIGH HPE NonStop CIPSAM - Memory corruption vulnerability
CVE-2026-79829 8.2 HIGH HPE NonStop HTTP WEBSERVER - Memory corruption vulnerability
CVE-2026-79821 8.2 HIGH HPE NonStop SOAP 4.0 - Memory corruption
CVE-2026-79832 7.6 HIGH HPE NonStop SQL/MX Executor - Buffer overflow vulnerability
CVE-2026-76661 7.6 HIGH HPE NonStop QIOMON - Memory corruption vulnerability
CVE-2026-73799 7.5 HIGH HPE NonStop SNMP Trap Multiplexer - Memory Corruption vulnerability
CVE-2026-79833 7.5 HIGH HPE NonStop ANSI SQLUTIL - Denial of Service vulnerability
CVE-2026-76663 7.5 HIGH HPE NonStop TELSERV - Memory corruption vulnerability
CVE-2026-76659 7.5 HIGH HPE NonStop TCP/IP UTILITIES - Denial of Service vulnerability
CVE-2026-79834 7.4 HIGH HPE NonStop SQL/MX SQLCAT - Unauthorized command execution vulnerability
CVE-2026-79839 7.3 HIGH HPE NonStop ODBC/MX Server - Memory corruption vulnerability
CVE-2026-79840 7.3 HIGH HPE NonStop XABroker - Memory corruption vulnerability
CVE-2026-79837 7.3 HIGH HPE NonStop SQL/MX UDR SERVER - Service disruption vulnerability
CVE-2026-79838 7.3 HIGH HPE NonStop ODBC/MX Services - Memory corruption vulnerability
CVE-2026-76665 7.1 HIGH HPE NonStop EXPAND - Buffer Overflow vulnerability
CVE-2026-79822 7.1 HIGH HPE NonStop TNS/X Native Inspect - Execution flow vulnerability
CVE-2026-79825 7.1 HIGH HPE NonStop NDSREST - Heap buffer overflow vulnerability
CVE-2026-79826 7.1 HIGH HPE NonStop OCAX - Heap buffer overflow vulnerability
CVE-2026-79827 7.1 HIGH HPE NonStop Inspect Subsystem - Heap buffer overflow vulnerability
CVE-2026-79828 7.1 HIGH HPE NonStop Debug Utilities - Heap buffer overflow vulnerability

Showing top 20 of 34 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same vendor: Hewlett Packard Enterprise

V. Comments for CVE-2026-79824

No comments yet

Leave a comment