CVE-2026-79832
validatedZero produced an exploit or a check.GHSA-fxm9-jr33-495j ↗EUVD-2026-102003 ↗
description
HPE NonStop SQL/MX Executor is affected by a stack-based buffer overflow. An attacker with low-level privileges may be able to disclose information or cause an affected process to stop.
mitigation
Restrict SQL/MX Executor access to authorized, least-privileged users and limit network exposure where possible. Monitor HPE guidance and apply a vendor-provided update when one is released.
outcome
Contextual check: a technique exists and was validated, but no deterministic check could cover this one.
source signals
Public signals that triggered or updated the pipeline. These are inputs for the deltas above.
- 2026-10-15 10:57Zcve_org: trigger signal, started the run
this entry in the feed
GET /api/v1/feed/CVE-2026-79832
{ "etk_id": "ETK-2026-1852", "cve_id": "CVE-2026-79832", "display_id": "CVE-2026-79832", "ghsa_id": "GHSA-fxm9-jr33-495j", "euvd_id": "EUVD-2026-102003", "status": "published", "anchor_state": "anchored", "title": "Stack buffer overflow in HPE NonStop SQL/MX Executor", "summary": "HPE NonStop SQL/MX Executor is affected by a stack-based buffer overflow. An attacker with low-level privileges may be able to disclose information or cause an affected process to stop.", "mitigation": "Restrict SQL/MX Executor access to authorized, least-privileged users and limit network exposure where possible. Monitor HPE guidance and apply a vendor-provided update when one is released.", "vendor": "Hewlett Packard Enterprise", "product": "HPE NonStop SQL/MX Executor", "affected": [ { "affected_notes": [ "T1051L40 and earlier" ], "affected_ranges": [], "ecosystem": null, "fixed_versions": [], "package_name": "HPE NonStop SQL/MX Executor", "purl": null } ], "cwes": [ 121 ], "cvss_score": 7.6, "cvss_src": "cna_vendor", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H", "epss_score": 0.0019, "epss_percentile": 0.0795, "epss_asof": "2026-10-20", "automation": "contextual", "check": true, "check_confidence_basis": "assessed", "exploit": false, "pipeline_minutes": 8.449940766666666, "t0_at": "2026-10-15T10:57:50.138000+00:00", "signals": { "check": { "at": "2026-10-20T09:46:55.014207+00:00", "days": 4.950750882025463, "is_lower_bound": false, "measured_at": "2026-10-15T10:57:50.138000+00:00", "url": null }, "trigger_signal": { "at": "2026-10-15T10:57:50.138000+00:00", "days": 0, "is_lower_bound": false, "measured_at": "2026-10-15T10:57:50.138000+00:00", "url": "https://www.cve.org/CVERecord?id=CVE-2026-79832" } } }
published 2026-10-17 05:17Z
last change 2026-10-21 05:31Z
Need the technical details behind an entry?
Every entry here shows what we attempted and when. The technical details, the generated exploit that fired it and the evidence behind the verdict are not public. Tell us about your use case and we’ll get back to you about extended API access.