Secret Key Handling and Data Deserialization Vulnerability in HPE NonStop Middleware
CVE-2026-73793

7.9HIGH

Key Information:

Vendor

HP
Status
HP Nonstop Middleware
Vendor
CVE Published:
14 October 2026

What is CVE-2026-73793?

The HPE NonStop Middleware software is exposed to a vulnerability related to improperly handled secret keys and insecure data deserialization processes. This issue may allow attackers to manipulate key handling mechanisms and exploit deserialized data, leading to unauthorized access or data integrity breaches. Users are strongly advised to assess their implementations and apply relevant patches or updates as necessary.

Affected Version(s)

HPE NonStop Middleware T1155L01^AAF and earlier

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpe...

CVSS V3.1

Score:
7.9
Severity:
HIGH
Confidentiality:
Low
Integrity:
High
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.