CVE-2026-79821
validatedZero produced an exploit or a check.GHSA-p5qr-xr9q-hq5c ↗EUVD-2026-101859 ↗
description
HPE NonStop SOAP 4.0 is affected by a memory-corruption vulnerability. An unauthenticated remote attacker with network access to the SOAP service may cause a system outage.
mitigation
Restrict SOAP service access to trusted network clients and isolate it from untrusted networks. Monitor HPE advisories and apply a vendor-provided update when one is released.
outcome
Contextual check: a technique exists and was validated, but no deterministic check could cover this one.
source signals
Public signals that triggered or updated the pipeline. These are inputs for the deltas above.
- 2026-10-15 06:38Zcve_org: trigger signal, started the run
this entry in the feed
GET /api/v1/feed/CVE-2026-79821
{ "etk_id": "ETK-2026-1672", "cve_id": "CVE-2026-79821", "display_id": "CVE-2026-79821", "ghsa_id": "GHSA-p5qr-xr9q-hq5c", "euvd_id": "EUVD-2026-101859", "status": "published", "anchor_state": "anchored", "title": "Memory corruption in HPE NonStop SOAP 4.0", "summary": "HPE NonStop SOAP 4.0 is affected by a memory-corruption vulnerability. An unauthenticated remote attacker with network access to the SOAP service may cause a system outage.", "mitigation": "Restrict SOAP service access to trusted network clients and isolate it from untrusted networks. Monitor HPE advisories and apply a vendor-provided update when one is released.", "vendor": "Hewlett Packard Enterprise", "product": "HPE NonStop SOAP 4.0", "affected": [ { "affected_notes": [ "T0865L01^ACN and earlier" ], "affected_ranges": [], "ecosystem": null, "fixed_versions": [], "package_name": "HPE NonStop SOAP 4.0", "purl": null } ], "cwes": [ 20 ], "cvss_score": 8.2, "cvss_src": "cna_vendor", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H", "epss_score": 0.0023, "epss_percentile": 0.1287, "epss_asof": "2026-10-20", "automation": "contextual", "check": true, "check_confidence_basis": "assessed", "exploit": false, "pipeline_minutes": 9.8917474, "t0_at": "2026-10-15T06:38:29.824000+00:00", "signals": { "check": { "at": "2026-10-16T12:06:18.469699+00:00", "days": 1.2276463622569445, "is_lower_bound": false, "measured_at": "2026-10-15T06:38:29.824000+00:00", "url": null }, "trigger_signal": { "at": "2026-10-15T06:38:29.824000+00:00", "days": 0, "is_lower_bound": false, "measured_at": "2026-10-15T06:38:29.824000+00:00", "url": "https://www.cve.org/CVERecord?id=CVE-2026-79821" } } }
published 2026-10-15 11:28Z
last change 2026-10-21 16:15Z
Need the technical details behind an entry?
Every entry here shows what we attempted and when. The technical details, the generated exploit that fired it and the evidence behind the verdict are not public. Tell us about your use case and we’ll get back to you about extended API access.