3148 matches found
CVE-2026-84147 Remote Code Execution Vulnerability in Manacle Technologies ERP System
This vulnerability exists in the ERP system due to improper authentication controls and inadequate file type validation at the API endpoint. An unauthenticated remote attacker could exploit this vulnerability by uploading arbitrary files to a web accessible directory on the targeted system...
PT-2026-84418
Name of the Vulnerable Software and Affected Versions HPE Networking Fabric Composer affected versions not specified Description A sensitive information disclosure issue exists in the API of HPE Networking Fabric Composer. An authenticated user with low privilege operator permissions can access...
PT-2026-84449
Name of the Vulnerable Software and Affected Versions HPE Networking Fabric Composer affected versions not specified Description An issue in the API endpoint allows an unauthenticated remote attacker to view information handled by the system. This could enable an attacker to gain insight into...
PT-2026-84199
Name of the Vulnerable Software and Affected Versions Manacle Technologies ERP affected versions not specified Description Improper authentication controls and inadequate file type validation at the API endpoint allow an unauthenticated remote attacker to upload arbitrary files to a web accessibl...
CVE-2026-73710: Missing Authentication for Critical Function
Vulnerabilities in an API endpoint of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to conduct a denial of service attack. Successful exploitation could allow an attacker to make limited unauthorized modifications to the underlying operating system and disrupt the...
CVE-2026-73758: Improper Privilege Management
A privilege escalation vulnerability exists in the API endpoint of AOS-CX. Successful exploitation could allow an authenticated low privilege operator user to change the state of certain settings of a vulnerable system...
PT-2026-84494
Name of the Vulnerable Software and Affected Versions AOS-CX switches affected versions not specified Description An issue exists in the API endpoint of AOS-CX switches that may allow an unauthenticated remote actor to bypass authentication controls. Recommendations At the moment, there is no...
CVE-2026-73711: Improper Privilege Management
A privilege escalation vulnerability exists in the API endpoint of HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated remote attacker to gain administrative privileges leading to complete compromise of the HPE Networking Fabric Composer host...
PT-2026-84415
A privilege escalation vulnerability exists in the API endpoint of HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated remote attacker to gain administrative privileges leading to complete compromise of the HPE Networking Fabric Composer host...
CVE-2026-73745: Exposure of Sensitive Information to an Unauthorized Actor
A vulnerability in the API endpoint of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to view some information handled by the affected system. Successful exploitation could allow an attacker to gain insight into internal services and workflows, increasing the risk o...
CVE-2026-73773: Uncontrolled Resource Consumption
An unauthenticated Denial-of-Service DoS vulnerability exists in the API endpoint of AOS-CX. Successful exploitation of this vulnerability results in the ability to interrupt the normal operation of the affected service...
CVE-2026-73783: Stack-based Buffer Overflow
Stack overflow vulnerabilities exist in an API endpoint of AOS-CX. Successful exploitation could allow an authenticated malicious actor to cause a denial-of-service condition on the affected system...
CVE-2026-73737: Improper Limitation of a Pathname to a Restricted Directory
An unauthenticated path traversal vulnerability exists in the API endpoint of HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated adjacent attacker to manipulate user generated files, potentially leading to unauthorized changes in critical system configurations,...
CVE-2026-84147: Unrestricted Upload of File with Dangerous Type
This vulnerability exists in the ERP system due to improper authentication controls and inadequate file type validation at the API endpoint. An unauthenticated remote attacker could exploit this vulnerability by uploading arbitrary files to a web accessible directory on the targeted system...
PT-2026-84200
This vulnerability exists in the ERP system due to improper authentication and authorization controls in the API endpoint. An unauthenticated remote attacker could exploit this vulnerability by manipulating parameter which could lead to exposure of sensitive information belonging to other users o...
PT-2026-84490
Name of the Vulnerable Software and Affected Versions AOS-CX affected versions not specified Description An unauthenticated Denial-of-Service DoS issue exists in the API endpoint of AOS-CX. Successful exploitation allows an attacker to interrupt the normal operation of the affected service...
PT-2026-84476
Name of the Vulnerable Software and Affected Versions AOS-CX affected versions not specified Description A privilege escalation issue exists in the API endpoint of AOS-CX. This allows an authenticated user with low privilege operator permissions to modify the state of specific system settings...
PT-2026-84500
Stack overflow vulnerabilities exist in an API endpoint of AOS-CX. Successful exploitation could allow an authenticated malicious actor to cause a denial-of-service condition on the affected system...
PT-2026-84446
A vulnerability in an API endpoint of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to spoof the source address attributed to their requests. Successful exploitation could allow an attacker to cause inaccurate attribution information to be recorded on the...
CVE-2026-73755: Improper Privilege Management
A privilege escalation vulnerability exists in the API endpoint of AOS-CX. Successful exploitation could allow an authenticated low-privilege operator user, after a required user action, to access sensitive information from the vulnerable system...