What is the CVSS score of EUVD-2026-102092?

EUVD-2026-102092 has a CVSS 3.1 base score of 7.3 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:H. EPSS exploitation probability: 0.1%.

How to fix or mitigate EUVD-2026-102092?

Within 24 hours, inventory every HPE NonStop ODBC/MX Server deployment, identify which NonStop applications and business services depend on it, and confirm no instance is reachable from untrusted networks or non-essential local accounts; verify that only authorized personnel hold local logon rights to the NonStop host and that the requirement for user interaction is reinforced through a targeted advisory to operators who handle untrusted files or connection strings. Within 7 days, reduce the local attack surface by enforcing least privilege on the ODBC/MX service account and its group memberships, removing or disabling unnecessary local interactive access, enabling audit logging on the ODBC/MX process so crash or memory-fault events are captured, and establishing a monitored alert for repeated service terminations that could indicate probing; also confirm that a current configuration backup exists so a compromised or corrupted instance can be rebuilt quickly. Within 30 days, engage HPE support to obtain the vendor's remediation timeline and any interim fix or hotfix build for NonStop ODBC/MX Server, apply it as soon as it is released under an emergency change, and in the interim rehearse the recovery runbook by validating that dependent applications can fail over or restart cleanly after an ODBC/MX outage; re-review this risk monthly and escalate if the vendor publishes a patch or if exploit activity is reported.

NonStop ODBC/MX EUVD-2026-102092

| CVE-2026-79839 HIGH

Stack-based Buffer Overflow (CWE-121)

2026-10-15 hpe

GHSA-rrch-6jcm-7hcp

Buffer Overflow Stack Overflow Hpe Nonstop Odbc Mx Server

7.3

CVSS 3.1 · Vendor: hpe

View

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain

Access

Obtain local authenticated access to NonStop host
Exploit

Submit crafted ODBC/MX input
Execution

Overflow stack buffer (CWE-121)
Impact

Corrupt process memory and crash ODBC/MX Server

Vulnerability Assessment

Weakness	CWE CWE-121 ASVS 5.0 V15 - Secure Coding and Architecture Stack buffer bounds checking MITRE ATT&CK 1 technique across 1 tactic: Execution The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. Sign in to read
Exploitation Conditions	Exploitation requires local access (AV:L) to a host running HPE NonStop ODBC/MX Server, valid low-privileged credentials (PR:L), and user interaction (UI:R) to deliver and process crafted ODBC/MX input that overflows a stack buffer (CWE-121). Limiting factors that reduce real-world risk: it is not remotely exploitable over the network, it demands authentication rather than anonymous access, it depends on the interaction step, and the described impact is confined to a service crash (denial of service) rather than confirmed arbitrary code execution. The affected component is a specific HPE NonStop database middleware server, further narrowing exposure to environments that deploy that platform.
Impact	CVSS base score is 7.3 (High), but the vector tells a more constrained story: AV:L means the attacker needs local access, PR:L requires valid (low) credentials, and UI:R requires user interaction, so this is not a remotely triggerable, zero-touch flaw. The dominant impact is availability (A:H) - the description explicitly caps the outcome at memory corruption leading to an application crash (DoS) - while C:L/I:L are only limited. No EPSS score, no CISA KEV listing, and no public POC were provided, so there is no signal of active or imminent widespread exploitation; exploitation status is 'no public exploit identified at time of analysis.' One signal is in tension with the rest: the input sets S:C (scope changed), which inflates the score, yet the description confines the effect to a crash of the ODBC/MX Server application itself, which argues for scope unchanged - verify the scope rationale with HPE. SSVC decision inputs (exploitation, automatable, technical impact) were not supplied. Net: this is a real but moderate-priority, patch-in-normal-cycle issue - a credentialed local DoS against a niche fault-tolerant platform, not a high-CVSS-but-trivially-exploitable internet-facing bug.
Exploit ScenarioDerived	A low-privileged but authenticated user on (or with local access to) a system running HPE NonStop ODBC/MX Server submits specially crafted input that the server processes, overflowing a stack buffer (CWE-121) and corrupting memory. The result is a crash of the ODBC/MX Server process, denying database connectivity to downstream applications. No public exploit code is known, and successful exploitation also depends on the required user interaction.

This Week Schedule remediation this week. Why: HIGH severity (CVSS 7.0-8.9).

No patch listed yet 0.1% exploitation probability (EPSS)

Get an e-mail when this CVE is exploited, patched or re-scored. Free account.

Alert me

AnalysisAIv1 – Oct 15, 2026

A stack-based buffer overflow in HPE NonStop ODBC/MX Server (CWE-121) allows a local attacker with valid low-privileged credentials and user interaction to corrupt memory, potentially causing an application crash and denial of service. The assessed CVSS vector (AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H) indicates local access, authentication, and user interaction are required, and the impact is confined to service disruption rather than confirmed code execution. No public exploit code or active exploitation has been identified at time of analysis.

RemediationAI

Patch status is not confirmed in the provided data; consult the HPE support advisory (https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbns05148en_us&docLocale=en_US) for the latest fixed version. In the meantime, restrict local interactive access to trusted users, enforce least privilege to minimize the impact of low-privileged credentials, and avoid processing untrusted input in the ODBC/MX Server. These compensating controls reduce exposure but do not fully eliminate the buffer overflow risk; monitoring for application crashes may provide early detection.

Affected VersionsENISA

HPE NonStop ODBC/MX Server T7970L40 and earlier

Affects your stack

Find out whether the stacks and servers you run are on an affected version.

Checking this CVE against your own stacks and servers is part of the Basic plan and up.

Technical ContextAI · show details

HPE NonStop ODBC/MX Server is database middleware that provides ODBC connectivity for NonStop systems. The vulnerability is a stack-based buffer overflow (CWE-121) where insufficient bounds checking on input allows an attacker to overwrite stack memory, leading to memory corruption and a crash. The CPE string cpe:2.3:a:hewlett_packard_enterprise:hpe_nonstop_odbc/mx_server:*:*:*:*:*:*:*:* indicates all versions of the product are potentially affected unless patched. The assessed vector specifies local access (AV:L), low privileges (PR:L), user interaction (UI:R), and unchanged scope (S:U), meaning exploitation cannot cross privilege boundaries and requires the victim to process crafted input.

Know when Hpe Nonstop Odbc Mx Server gets its next vulnerability

Watch products and get an email when something new is published
Check this CVE against your own stack and servers
Exploit and PoC references, threat intelligence from 22 sources

Continue with Google Continue with GitHub

No credit card · 7-day full trial

Severity by source

Vendor (hpe) PRIMARY 7.3 HIGH

AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:H

vuln.today AI 6.1 MEDIUM

Local authenticated access with user interaction yields AV:L/PR:L/UI:R; memory corruption gives limited C/I and a high-availability crash, and impact stays within the ODBC/MX process so S:U.

3.1 AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H

4.0 AV:L/AC:L/AT:N/PR:L/UI:A/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (hpe).

CVSS VectorVendor: hpe

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

Required

Scope

Changed

Confidentiality

Low

Integrity

Low

Availability

High

DescriptionCVE.org

A buffer overflow vulnerability in HPE NonStop ODBC/MX Server may cause memory corruption, resulting in application crash.

Executive ViewAI

Why It Matters

A memory-corruption flaw in HPE NonStop ODBC/MX Server can crash the connectivity layer that NonStop-hosted applications use for database access, putting availability of dependent transaction and reporting workloads at risk. Exploitation requires an attacker to already hold valid low-privileged credentials on the affected host and to induce a user to take an action, so the realistic threat is insider misuse or a compromised low-privilege account rather than an external intrusion path. With no vendor patch and no evidence of exploitation or public exploit code at this time, leadership should treat this as an operational-resilience issue affecting critical NonStop services, not an immediate breach scenario.

Business Impact: Medium

Compensating Controls

No vendor-released patch identified at time of analysis. Interim mitigations: restrict and review local logon privileges on NonStop hosts so only essential, trusted accounts can reach the ODBC/MX Server; enforce strict least privilege on the ODBC/MX service account; block untrusted network paths to the service; warn operators about user-interaction vectors such as opening unsolicited files or connection strings; enable process-level audit logging and alerting on ODBC/MX crashes or repeated restarts; maintain tested configuration backups and a rehearsed restart/failover procedure for dependent applications; monitor HPE advisories for a patch or hotfix and apply it when released. Note: no public exploit identified at time of analysis.

Threat Intelligence Overview

EPSS Score

0.1%

Top 99% exploitable

Prevalence

Low

HPE NonStop is a niche, mission-critical platform mostly in banking/telecom

Data Quality

3 sources

Confidence: Low

EUVD

NVD

CVE.org

EPSS

Vulnrichment

How this decision was reached

The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.

SignalValue

Severity HIGH

CISA KEV No

Public POC No

EPSS 0.1%

Patch available No

Active threat No

Deciding rule

HIGH severity (CVSS 7.0-8.9)

What every action level means

Emergency Immediate action required. Criteria: CRITICAL + in CISA KEV (actively exploited) without patch, OR CRITICAL + EPSS > 30% without patch, OR CRITICAL + active threat signals without patch.

Act Now Prioritize within 24-48h. Criteria: in KEV with patch available, OR CRITICAL + public POC, OR HIGH + EPSS > 10%, OR CRITICAL + active threat, OR any CRITICAL severity.

This Week Schedule remediation this week. Criteria: HIGH severity (CVSS 7.0-8.9). Patch within normal change window.

This Month Plan within 30 days. Criteria: MEDIUM severity (CVSS 4.0-6.9), lower exploitation probability. Include in regular patch cycle.

Monitor Track and reassess. Criteria: LOW severity (CVSS 0.1-3.9), minimal exploitation risk. No immediate action needed.

SSVC AssessmentENISA

SSVC Decision

Defer

Exploitation

None

System Exposure· derived

Small

Automatable

Human Impact

Medium

Technical Impact

Partial

Priority Score

Low Medium High Critical

KEV: 0

EPSS: 0

CVSS: +36

PoC: 0

Weaponized: 0

Threat intel: 0

Gov advisory: 0

Attack Technique

Buffer Overflow HIGH

A buffer overflow occurs when a program writes more data to a memory buffer than it was allocated to hold, causing the excess data to spill into adjacent memory regions.

Stack-based Buffer Overflow HIGH

A stack-based buffer overflow occurs when a program writes more data to a buffer located on the stack than it was allocated to hold.