Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

CVE-2026-79836— HPE NonStop SQL/MX Run-Time Statistics - Information disclosure and DoS vulnerability

Quick assessment

Affected
Hewlett Packard Enterprise HPE NonStop SQL/MX Run-Time Statistics
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

HPE NonStop SQL/MX 运行时统计功能存在一个漏洞,攻击者可能利用该漏洞导致内存损坏和空指针解引用,从而可能引发进程崩溃、拒绝服务(DoS)或信息泄露。

CVSS 6.4 · Medium EPSS 0.17% · P5

Possible ATT&CK Techniques 1 AI

T1190 · Exploit Public-Facing Application

Affected Version Matrix 1

VendorProduct Version RangeStatus
Hewlett Packard Enterprise HPE NonStop SQL/MX Run-Time Statistics T1117L40 and earlier affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-79836

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
HPE NonStop SQL/MX Run-Time Statistics - Information disclosure and DoS vulnerability
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability HPE NonStop SQL/MX Run-Time Statistics may allow an attacker to cause memory corruption and null pointer dereference, potentially leading to process crash,  DoS or information disclosure.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
输入验证不恰当
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
Hewlett Packard Enterprise HPE NonStop SQL/MX Run-Time Statistics T1117L40 and earlier -

II. Public POCs for CVE-2026-79836

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-79836

请登录查看更多情报信息。

Other References for CVE-2026-79836 (1)

Same Patch Batch · Hewlett Packard Enterprise · 2026-10-15 · 34 CVEs total

CVE-2026-76660 8.7 HIGH HPE NonStop CIPSAM - Memory corruption vulnerability
CVE-2026-79829 8.2 HIGH HPE NonStop HTTP WEBSERVER - Memory corruption vulnerability
CVE-2026-79821 8.2 HIGH HPE NonStop SOAP 4.0 - Memory corruption
CVE-2026-79824 8.0 HIGH HPE NonStop Python 3.x - Directory traversal vulnerability
CVE-2026-79832 7.6 HIGH HPE NonStop SQL/MX Executor - Buffer overflow vulnerability
CVE-2026-76661 7.6 HIGH HPE NonStop QIOMON - Memory corruption vulnerability
CVE-2026-79833 7.5 HIGH HPE NonStop ANSI SQLUTIL - Denial of Service vulnerability
CVE-2026-73799 7.5 HIGH HPE NonStop SNMP Trap Multiplexer - Memory Corruption vulnerability
CVE-2026-76663 7.5 HIGH HPE NonStop TELSERV - Memory corruption vulnerability
CVE-2026-76659 7.5 HIGH HPE NonStop TCP/IP UTILITIES - Denial of Service vulnerability
CVE-2026-79834 7.4 HIGH HPE NonStop SQL/MX SQLCAT - Unauthorized command execution vulnerability
CVE-2026-79839 7.3 HIGH HPE NonStop ODBC/MX Server - Memory corruption vulnerability
CVE-2026-79840 7.3 HIGH HPE NonStop XABroker - Memory corruption vulnerability
CVE-2026-79837 7.3 HIGH HPE NonStop SQL/MX UDR SERVER - Service disruption vulnerability
CVE-2026-79838 7.3 HIGH HPE NonStop ODBC/MX Services - Memory corruption vulnerability
CVE-2026-76665 7.1 HIGH HPE NonStop EXPAND - Buffer Overflow vulnerability
CVE-2026-79828 7.1 HIGH HPE NonStop Debug Utilities - Heap buffer overflow vulnerability
CVE-2026-79827 7.1 HIGH HPE NonStop Inspect Subsystem - Heap buffer overflow vulnerability
CVE-2026-79826 7.1 HIGH HPE NonStop OCAX - Heap buffer overflow vulnerability
CVE-2026-79825 7.1 HIGH HPE NonStop NDSREST - Heap buffer overflow vulnerability

Showing top 20 of 34 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

V. Comments for CVE-2026-79836

No comments yet


Leave a comment