CVE-2026-73790

{
  "etk_id": "ETK-2026-1556",
  "cve_id": "CVE-2026-73790",
  "display_id": "CVE-2026-73790",
  "ghsa_id": "GHSA-f22h-g445-7rgr",
  "euvd_id": "EUVD-2026-100941",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Improper input validation in HPE NonStop iTP WebServer",
  "summary": "HPE NonStop iTP WebServer is affected by an input-validation flaw that may lead to memory corruption. A remote unauthenticated attacker may be able to cause a system shutdown; the evidence does not state any additional preconditions.",
  "mitigation": "Apply vendor-provided updates when available, as no fixed version is recorded. Until then, reduce exposure by limiting network access to the WebServer to trusted clients and monitoring affected systems for unexpected shutdowns.",
  "vendor": "Hewlett Packard Enterprise",
  "product": "HPE NonStop iTP WebServer",
  "affected": [
    {
      "affected_notes": [
        "Prior to T8996L01^AGZ",
        "Prior to T8997L01^AGZ"
      ],
      "affected_ranges": [],
      "ecosystem": null,
      "fixed_versions": [],
      "package_name": "HPE NonStop iTP WebServer",
      "purl": null
    }
  ],
  "cwes": [
    20
  ],
  "cvss_score": 8.2,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
  "epss_score": 0.0031,
  "epss_percentile": 0.2262,
  "epss_asof": "2026-10-20",
  "automation": "deterministic",
  "check": false,
  "check_confidence_basis": null,
  "exploit": false,
  "pipeline_minutes": 9.911835933333334,
  "t0_at": "2026-10-14T08:43:12.289000+00:00",
  "signals": {
    "trigger_signal": {
      "at": "2026-10-14T08:43:12.289000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-10-14T08:43:12.289000+00:00",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-73790"
    }
  }
}