Hewlett Packard Enterprise has 52 CVEs on record. Disclosure cadence is accelerating: 52 in the last 90 days against 0 in the 90 before. The busiest recent month was October 2026 with 47. The median CVSS is 7.1 (high), with 1 rated critical. None have a confirmed exploitation report. The dominant weakness classes are CWE-121 (11) and CWE-20 (10). Most affected products: HPE NonStop EXPAND (4), HPE OneView (3), HPE Compute Scale-up Server 3200 platform (2).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 7.1
- Publish → KEV
- —
- Last 90 days
- 52 prev 0
Weakness classes
Products
- HPE NonStop EXPAND 4
- HPE OneView 3
- HPE Compute Scale-up Server 3200 platform 2
- HPE IceWall products 2
- HPE NonStop SNMP Trap Multiplexer 2
- HPE NonStop TCP/IP UTILITIES 2
Worst active — by depth score
CVE-2026-79842Critical· 9.1An authentication bypass vulnerability exists in HPE Intelligent Management Center (iMC) prior to v7.3 E071350CVE-2026-76660High· 8.7A vulnerability in HPE NonStop CIPSAM allows an out-of-bounds write that can corrupt buffer data.48CVE-2026-73784High· 8.8A potential security vulnerability in HPE IceWall products could be exploited to tamper SAML response, allowing an attacker to impersonate another user.48CVE-2026-79829High· 8.2A security vulnerability in HPE NonStop HTTP WEBSERVER can cause memory corruption which may result in a system halt.45CVE-2026-79821High· 8.2A security vulnerability in HPE NonStop SOAP 4.0 may cause memory corruption resulting in a system down.45
Hewlett Packard Enterprise vulnerabilities
CVEs affecting Hewlett Packard Enterprise, newest first. Open any entry for full detail, references, and exploit status.
52 CVEsRSS
CVE-2026-76739Medium· 4.3HPE Compute Scale-up Server 3200 and 3250 platforms and Superdome Flex server, Remote RMC file modification
A potential security vulnerability in HPE Compute Scale-up Server 3200 and 3250 platforms and Superdome Flex server could be remotely exploited to list and modify RMC filesystem.
CVE-2026-76740High· 7.2HPE Compute Scale-up Server 3200 and 3250 platforms, Superdome Flex and Superdome Flex 280 servers, Remote Command Execution vulnerability
A security vulnerability in HPE Compute Scale-up Server 3200 and 3250 platforms, Superdome Flex and Superdome Flex 280 servers could be exploited remotely to execute arbitrary commands on the RMC.
CVE-2026-79838High· 7.3A buffer overflow vulnerability in HPE NonStop ODBC/MX Services may cause memory corruption, resulting in application crash.
A buffer overflow vulnerability in HPE NonStop ODBC/MX Services may cause memory corruption, resulting in application crash.
CVE-2026-79840High· 7.3A buffer overflow vulnerability in HPE NonStop XABroker may cause memory corruption, resulting in application crash.
A buffer overflow vulnerability in HPE NonStop XABroker may cause memory corruption, resulting in application crash.
CVE-2026-79839High· 7.3A buffer overflow vulnerability in HPE NonStop ODBC/MX Server may cause memory corruption, resulting in application crash.
A buffer overflow vulnerability in HPE NonStop ODBC/MX Server may cause memory corruption, resulting in application crash.
CVE-2026-79841Medium· 5.8A buffer overflow vulnerability in HPE NonStop RDMA SERVICES NSK may cause out-of-bounds memory write, which may result in memory corruption.
A buffer overflow vulnerability in HPE NonStop RDMA SERVICES NSK may cause out-of-bounds memory write, which may result in memory corruption.
CVE-2026-79843Medium· 6.5A corrupted file may cause out-of-bounds read in HPE NonStop SQL/MX EXE under certain conditions, potentially leading to information disclosure, process termination, CPU halt, or data corruption.
A corrupted file may cause out-of-bounds read in HPE NonStop SQL/MX EXE under certain conditions, potentially leading to information disclosure, process termination, CPU halt, or data corruption.
CVE-2026-79837High· 7.3A vulnerability in HPE NonStop SQL/MX UDR SERVER may allow a crafted message to cause process termination, service disruption or memory corruption, resulting in undefined behavior.
A vulnerability in HPE NonStop SQL/MX UDR SERVER may allow a crafted message to cause process termination, service disruption or memory corruption, resulting in undefined behavior.
CVE-2026-79834High· 7.4A security vulnerability in HPE NonStop SQL/MX SQLCAT may allow an unauthenticated user to perform unauthorized command execution.
A security vulnerability in HPE NonStop SQL/MX SQLCAT may allow an unauthenticated user to perform unauthorized command execution.
CVE-2026-79836Medium· 6.4A vulnerability HPE NonStop SQL/MX Run-Time Statistics may allow an attacker to cause memory corruption and null pointer dereference, potentially leading to process crash, DoS or information disclosure.
A vulnerability HPE NonStop SQL/MX Run-Time Statistics may allow an attacker to cause memory corruption and null pointer dereference, potentially leading to process crash, DoS or information disclosure.
CVE-2026-79835Low· 2.8A crafted input message can cause a buffer overflow in HPE Nonstop KMS Server.
A crafted input message can cause a buffer overflow in HPE Nonstop KMS Server.
CVE-2026-79833High· 7.5A vulnerability in HPE NonStop ANSI SQLUTIL may allow a remote unauthenticated actor to cause an affected service to terminate unexpectedly, causing a denial of service.
A vulnerability in HPE NonStop ANSI SQLUTIL may allow a remote unauthenticated actor to cause an affected service to terminate unexpectedly, causing a denial of service.
CVE-2026-79830Medium· 6.6A vulnerability in HPE NonStop Kernel Level Thread Model Lib can cause stack buffer overflow which can allow arbitrary code execution.
A vulnerability in HPE NonStop Kernel Level Thread Model Lib can cause stack buffer overflow which can allow arbitrary code execution.
CVE-2026-79831Medium· 6.6A heap buffer overflow in HPE NonStop Posix User Threads may allow arbitrary code execution.
A heap buffer overflow in HPE NonStop Posix User Threads may allow arbitrary code execution.
CVE-2026-79832High· 7.6A stack buffer overflow vulnerability in HPE NonStop SQL/MX Executor may potentially result in information disclosure or process crash.
A stack buffer overflow vulnerability in HPE NonStop SQL/MX Executor may potentially result in information disclosure or process crash.
CVE-2026-79829High· 8.2A security vulnerability in HPE NonStop HTTP WEBSERVER can cause memory corruption which may result in a system halt.
A security vulnerability in HPE NonStop HTTP WEBSERVER can cause memory corruption which may result in a system halt.
CVE-2026-79828High· 7.1A heap buffer overflow in HPE NonStop Debug Utilities could corrupt resume-execution address and may potentially redirect execution flow.
A heap buffer overflow in HPE NonStop Debug Utilities could corrupt resume-execution address and may potentially redirect execution flow.
CVE-2026-79825High· 7.1A heap buffer overflow in HPE NonStop NDSREST could corrupt resume-execution address and may potentially redirect execution flow.
A heap buffer overflow in HPE NonStop NDSREST could corrupt resume-execution address and may potentially redirect execution flow.
CVE-2026-79824High· 8.0A directory traversal vulnerability in HPE NonStop Python 3.x could allow attackers to overwrite arbitrary files via a .
A directory traversal vulnerability in HPE NonStop Python 3.x could allow attackers to overwrite arbitrary files via a .. (dot dot) sequence in filenames in a TAR archive.
CVE-2026-79826High· 7.1A heap buffer overflow in HPE NonStop OCAX could corrupt address space and may potentially redirect execution flow.
A heap buffer overflow in HPE NonStop OCAX could corrupt address space and may potentially redirect execution flow.
CVE-2026-79827High· 7.1A heap buffer overflow in HPE NonStop Inspect Subsystem could corrupt resume-execution address and may potentially redirect execution flow.
A heap buffer overflow in HPE NonStop Inspect Subsystem could corrupt resume-execution address and may potentially redirect execution flow.
CVE-2026-79823Medium· 4.0HPE NonStop EMS Distributor is vulnerable to buffer overflow condition that may result in undesirable behavior.
HPE NonStop EMS Distributor is vulnerable to buffer overflow condition that may result in undesirable behavior.
CVE-2026-79822High· 7.1A security vulnerability in HPE NonStop TNS/X Native Inspect may cause corruption of address and potentially redirect execution flow.
A security vulnerability in HPE NonStop TNS/X Native Inspect may cause corruption of address and potentially redirect execution flow.
CVE-2026-79821High· 8.2A security vulnerability in HPE NonStop SOAP 4.0 may cause memory corruption resulting in a system down.
A security vulnerability in HPE NonStop SOAP 4.0 may cause memory corruption resulting in a system down.
CVE-2026-76668Medium· 6.3A security vulnerability in HPE NonStop Kernel may allow user space access to privileged or unmapped data.
A security vulnerability in HPE NonStop Kernel may allow user space access to privileged or unmapped data.
CVE-2026-76665High· 7.1A security vulnerability in HPE NonStop EXPAND may cause out-of-bounds memory read resulting in buffer overflow.
A security vulnerability in HPE NonStop EXPAND may cause out-of-bounds memory read resulting in buffer overflow.
CVE-2026-76667Medium· 5.7A security vulnerability in HPE NonStop EXPAND may result in out-of-bounds memory read.
A security vulnerability in HPE NonStop EXPAND may result in out-of-bounds memory read.
CVE-2026-76666Medium· 4.7A security vulnerability in HPE NonStop EXPAND may result in out-of-bounds memory read.
A security vulnerability in HPE NonStop EXPAND may result in out-of-bounds memory read.
CVE-2026-76664Medium· 6.4A security vulnerability in HPE NonStop EXPAND may result in out-of-bounds memory read/write operations
A security vulnerability in HPE NonStop EXPAND may result in out-of-bounds memory read/write operations
CVE-2026-76663High· 7.5A stack-based buffer overflow vulnerability in HPE NonStop TELSERV can cause memory corruption that may result in DoS.
A stack-based buffer overflow vulnerability in HPE NonStop TELSERV can cause memory corruption that may result in DoS.