HPE NonStop CIPSAM: Out-of-bounds write leading to buffer corruption
Summary
HPE NonStop CIPSAM contains an out-of-bounds write (CWE-20) that can corrupt buffer data. The CNA rates it CVSS 3.1 8.7 (AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:H). An attacker needs local access and low privileges, so the main risk is a compromised local account or an insider on a NonStop system. Remote exploitation is not indicated, but the advisory's remote-exploit flag still needs confirmation.
Affected
- HPE NonStop CIPSAM T0693L02^BAU and earlier (per HPE advisory HPESBNS05148)
Fixed in
- Unverified: the advisory table fragment appears to list T0693L02^BAX (L24.08 onwards) as the fixed release. Confirm the fixed version in the full HPE advisory before acting.
Workaround
- No vendor workaround is documented in the sources reviewed.
- Generic fallback (not from HPE): restrict CIPSAM access to trusted internal subnets.
Exploitation
- No public proof of concept or exploit is known (VulDB).
- CISA SSVC (ADP): exploitation none, automatable no.
- Not listed in CISA KEV. EPSS 0.00114.
- No known in-the-wild exploitation as of 2026-11-01.
Our recommendation
- Check whether NonStop systems with CIPSAM T0693L02^BAU or earlier are in use.
- Read the full HPESBNS05148 table and apply the fixed CIPSAM release.
- Limit local accounts with access to the NonStop environment.
- Reassess once NVD completes its analysis. Relevance for typical SMEs is low, since NonStop is uncommon in this segment.
Public exploits
PoC-in-GitHub, Metasploit and Exploit-DB list nothing for this CVE.
Research sources
- HPE Security Bulletin HPESBNS05148 support.hpe.com
- OpenCVE: CVE-2026-76660 app.opencve.io
- VulDB: CVE-2026-76660 vuldb.com
- VulDB: vulnerability 420457 vuldb.com
- Vulners: VulnRichment CVE-2026-76660 vulners.com
Researched and written up in English and German by an AI (Claude by Anthropic) based on NVD, CISA, EPSS and the sources listed. The vendor information is authoritative. Researched on 1 Nov 2026, 02:37.
Original description (NVD)
A vulnerability in HPE NonStop CIPSAM allows an out-of-bounds write that can corrupt buffer data.
Sources
The tracker combines official, freely usable data sources – updated continuously:
- NVD (NIST) – CVEs, rating (CVSS), affected products
- CISA KEV – vulnerabilities confirmed by CISA as actively exploited
- CISA Vulnrichment – CISA assessment (SSVC) in the official CVE record
- FIRST EPSS – probability of exploitation
- Microsoft MSRC – Patch Tuesday: vulnerabilities, severity, updates
- PoC-in-GitHub – public proof-of-concept repositories
- Metasploit (Rapid7) – modules of the Metasploit Framework
- Exploit-DB (OffSec) – archive of public exploits (links only)
- Patch days: official vendor pages (linked per vendor) (Vendor patch days)
This product uses data from the NVD API but is not endorsed or certified by the NVD. EPSS data © FIRST.org.
Affected? We can help.
We check whether your systems are affected, install updates and close the gap – continuously with the System Health Checker if you wish.