CVE-2026-82158: Dell Wyse Management Suite: Dell Wyse Management Suite, versions prior to 2609.0.0.155, contain an Improper Neutralization of Input During Web Page…

Dell Wyse Management Suite, versions prior to 2609.0.0.155, contain an Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Script injection...

CVE-2026-88066: anthropics claude-code: Claude Desktop is Anthropic's desktop application for interacting with Claude

Claude Desktop is Anthropic's desktop application for interacting with Claude. Prior to 1.8089.0, Claude Desktop on Windows invokes git.exe through uvspawn without an absolute path, allowing Windows search-path resolution to select a malicious git.exe placed in the opened project's current workin...

CVE-2026-95724: Hewlett Packard Enterprise (HPE) Virtual Intranet Access (VIA): An improper certificate validation vulnerability exists in HPE Networking Virtual Intranet Access (VIA)

An improper certificate validation vulnerability exists in HPE Networking Virtual Intranet Access VIA. Successful exploitation could allow an unauthenticated remote attacker to bypass authentication mechanisms, leading to the possible disclosure of sensitive information...

CVE-2026-95723: Hewlett Packard Enterprise (HPE) Virtual Intranet Access (VIA): A missing integrity verification vulnerability has been discovered in the Virtual Intranet Access (VIA) client

A missing integrity verification vulnerability has been discovered in the Virtual Intranet Access VIA client. Successful exploitation of this vulnerability could allow a low-privileged local attacker to execute arbitrary code with elevated privileges on the underlying operating system...

CVE-2026-95772: Hewlett Packard Enterprise (HPE) Fabric Composer: A race condition vulnerability exists in the API of HPE Networking Fabric Composer

A race condition vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated attacker with low privileges to corrupt the configuration state of the affected system...

CVE-2026-95762: Hewlett Packard Enterprise (HPE) Fabric Composer: An insufficient session expiration vulnerability exists in the API of HPE Networking Fabric Composer if certain…

An insufficient session expiration vulnerability exists in the API of HPE Networking Fabric Composer if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an authenticated administrative attacker to maintain persistent access to the affected syste...

CVE-2026-95776: Hewlett Packard Enterprise (HPE) Fabric Composer: An authenticated path traversal vulnerability exists in the API of HPE Networking Fabric Composer, which could be…

An authenticated path traversal vulnerability exists in the API of HPE Networking Fabric Composer, which could be exploited by an authenticated low-privileged user if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacker to read certain...

CVE-2026-95758: Hewlett Packard Enterprise (HPE) Fabric Composer: An authorization bypass vulnerability exists in the API of HPE Networking Fabric Composer

An authorization bypass vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated attacker to bypass security restrictions and modify protected resources on the affected system...

CVE-2026-95764: Hewlett Packard Enterprise (HPE) Fabric Composer: An improper certificate validation vulnerability exists in the API of HPE Networking Fabric Composer

An improper certificate validation vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated adjacent attacker to access sensitive information...

CVE-2026-95766: Hewlett Packard Enterprise (HPE) Fabric Composer: Sensitive information disclosure vulnerabilities in HPE Networking Fabric Composer could allow an authenticated…

Sensitive information disclosure vulnerabilities in HPE Networking Fabric Composer could allow an authenticated attacker with low privileges to access sensitive information. Successful exploitation could allow an attacker to disclose sensitive information...

CVE-2026-95768: Hewlett Packard Enterprise (HPE) Fabric Composer: A privilege escalation vulnerability exists in the API of HPE Networking Fabric Composer if certain preconditions…

A privilege escalation vulnerability exists in the API of HPE Networking Fabric Composer if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an authenticated low-privileged remote attacker to obtain sensitive information from the affected system...

CVE-2026-95767: Hewlett Packard Enterprise (HPE) Fabric Composer: An unauthenticated information disclosure vulnerability exists in the API of HPE Networking Fabric Composer

An unauthenticated information disclosure vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated remote attacker to obtain sensitive information about the affected system...

CVE-2026-95744: Hewlett Packard Enterprise (HPE) Fabric Composer: A sensitive information disclosure vulnerability in the affected interface of HPE Networking Fabric Composer could…

A sensitive information disclosure vulnerability in the affected interface of HPE Networking Fabric Composer could allow an authenticated low-privileged attacker to access sensitive information, if certain preconditions outside of the attacker's control are met. Successful exploitation could allo...

CVE-2026-95746: Hewlett Packard Enterprise (HPE) Fabric Composer: An authentication bypass vulnerability in the API endpoint of HPE Networking Fabric Composer could allow an…

An authentication bypass vulnerability in the API endpoint of HPE Networking Fabric Composer could allow an unauthenticated adjacent attacker to circumvent existing authentication controls if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an...

CVE-2026-95751: Hewlett Packard Enterprise (HPE) Fabric Composer: An improper certificate validation vulnerability in the API of HPE Networking Fabric Composer could allow an…

An improper certificate validation vulnerability in the API of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to circumvent existing authentication controls if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an...

CVE-2026-95743: Hewlett Packard Enterprise (HPE) Fabric Composer: Local privilege escalation vulnerabilities exist in the underlying operating system of HPE Networking Fabric Composer

Local privilege escalation vulnerabilities exist in the underlying operating system of HPE Networking Fabric Composer. Successful exploitation could allow a local attacker with low privileges to gain elevated privileges on the affected system...

CVE-2026-95729: Hewlett Packard Enterprise (HPE) Virtual Intranet Access (VIA): A sensitive information disclosure vulnerability exists in HPE Networking VIA

A sensitive information disclosure vulnerability exists in HPE Networking VIA. Successful exploitation could allow an authenticated attacker to obtain sensitive information...

CVE-2026-95740: Hewlett Packard Enterprise (HPE) Fabric Composer: An improper certificate validation vulnerability in HPE Networking Fabric Composer could allow an unauthenticated…

An improper certificate validation vulnerability in HPE Networking Fabric Composer could allow an unauthenticated adjacent attacker to intercept communications between the affected system and remote servers if certain preconditions outside of the attacker's control are met. Successful exploitatio...

CVE-2026-89292: Eclipse Foundation Eclipse Mnestix: In Eclipse Mnestix Browser versions 1.6.0 up until but excluding 2.3.0 it was possible for an unauthenticated attacker…

In Eclipse Mnestix Browser versions 1.6.0 up until but excluding 2.3.0 it was possible for an unauthenticated attacker to exfiltrate the MNESTIXBACKENDAPIKEY for all configured Infrastructures...

CVE-2026-116845: netbox-community netbox: NetBox from 2.9.0 before 4.7.4 contains a broken access control vulnerability in BulkComponentCreateView that allows…

NetBox from 2.9.0 before 4.7.4 contains a broken access control vulnerability in BulkComponentCreateView that allows authenticated users to bypass view permissions on parent devices and virtual machines. Attackers with add-component permission can submit arbitrary device or VM IDs, or all with...