CVE-2026-73794
Awaiting Analysis Awaiting Analysis - Queue

Predictable Seed in HPE NonStop MODULAR NSJ

Vulnerability report for CVE-2026-73794, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.

Publication date: 2026-10-14

Last updated on: 2026-10-14

Assigner: Hewlett Packard Enterprise (HPE)

Description

HPE NonStop MODULAR NSJΒ  contains a predictable seed vulnerability in Random Number Generation (PRNG)

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-14
Last Modified
2026-10-14
Generated
2026-10-19
AI Q&A
2026-10-15
EPSS Evaluated
2026-10-18
NVD
EUVD

Affected Vendors & Products

Showing 3 associated CPEs
Vendor Product Version / Range
Hewlett Packard Enterprise HPE NonStop MODULAR NSJ T3066L17^AAP and earlier
Hewlett Packard Enterprise HPE NonStop MODULAR NSJ T3066K17
Hewlett Packard Enterprise HPE NonStop MODULAR NSJ T3066K21^AAM

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-337 A Pseudo-Random Number Generator (PRNG) is initialized from a predictable seed, such as the process ID or system time.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

HPE NonStop MODULAR NSJ has a predictable seed vulnerability in its Random Number Generation (PRNG). This means the system's random number generator does not use a sufficiently random seed, making it easier for attackers to predict or guess the output.

Impact Analysis

This vulnerability could allow attackers to predict random values generated by the system, potentially leading to unauthorized access, data breaches, or manipulation of system behavior. It may affect applications relying on secure random number generation.

Compliance Impact

The vulnerability involves a predictable seed in Random Number Generation (PRNG), which could allow attackers to predict or manipulate random values. This may impact compliance with standards requiring strong cryptographic controls, such as GDPR (data integrity) and HIPAA (secure data handling), by potentially exposing sensitive data to unauthorized access or manipulation.

Mitigation Strategies

Apply patches or updates from HPE for the MODULAR NSJ component to address the predictable seed vulnerability in the PRNG. Monitor HPE security advisories for specific mitigation instructions.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-73794. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart