CVE-2026-73797

Awaiting Analysis Awaiting Analysis - Queue

TSQLFIL API Address Space Corruption in HPE NonStop

Publication date: 2026-10-14

Last updated on: 2026-10-14

Assigner: Hewlett Packard Enterprise (HPE)

Description

A security vulnerability in HPE NonStop TSQLFIL may cause address space corruption when a specific API is called.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-14

Last Modified

2026-10-14

Generated

2026-10-19

AI Q&A

2026-10-15

EPSS Evaluated

2026-10-18

NVD

CVE-2026-73797

EUVD

EUVD-2026-101005

Affected Vendors & Products

Vendor	Product	Version / Range
Hewlett	Packard	Enterprise HPE NonStop TSQLFIL T9196L01^AGI and earlier
Hewlett	Packard	Enterprise HPE NonStop TSQLFIL T9196L02

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-475	The behavior of this function is undefined unless its control parameter is set to a specific value.

Attack-Flow Graph

Executive Summary

This vulnerability is a security issue in HPE NonStop TSQLFIL that can cause address space corruption when a specific API is called. It may lead to unintended behavior or crashes in the affected system.

Detection Guidance

Detection requires checking for address space corruption in HPE NonStop TSQLFIL when the vulnerable API is called. No specific commands are provided in the context. Monitor system logs for crashes or unusual behavior in TSQLFIL processes.

Impact Analysis

The impact includes potential system instability or crashes due to address space corruption. It may also allow unauthorized modifications to data or system behavior, depending on the API's function and permissions.

Mitigation Strategies

Apply patches or updates provided by HPE for HPE NonStop TSQLFIL to address the address space corruption issue. Monitor HPE security alerts for further guidance.

Hi! I’m here to help you understand CVE-2026-73797. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70