EUVD-2026-90982

Tapo C120 v1 and C200 v5 do not enforce authentication for do method HTTPS onboarding connect actions after initial setup. An unauthenticated adjacent attacker can submit unauthorized wireless configuration parameters, causing the camera to attempt connection to a different network. Successful...

CVE-2026-95376

A flaw was found in chromium-browser. The DevTools component improperly handles externally controlled references, allowing an adjacent attacker to bypass system access restrictions. By leveraging social engineering to interact with a user and transmitting crafted network traffic, an attacker on t...

CVE-2026-76723

Buffer overflow vulnerabilities exist in the affected interface of HPE Networking Instant ON APS that could allow an unauthenticated adjacent attacker to achieve remote code execution. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system...

CVE-2026-76730

An authentication bypass vulnerability exists in the PAPI protocol of HPE Networking Instant ON APs due to improper packet handling. This flaw allows an unauthenticated adjacent attacker to circumvent existing authentication controls and send unauthorized network traffic to the target device. Spe...

EUVD-2026-89349

An authentication bypass vulnerability exists in the PAPI protocol of HPE Networking Instant ON APs that could allow an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to circumvent certain existing authentication...

CVE-2026-76725 Authentication Bypass in a Management Protocol of HPE Networking Instant ON APs

A vulnerability has been identified in a management protocol of HPE Networking Instant ON APs that could allow an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation could result in a complete bypass of security restrictions, potentially leadi...

CVE-2026-76730: Improper Authentication

An authentication bypass vulnerability exists in the PAPI protocol of HPE Networking Instant ON APs that could allow an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to circumvent certain existing authentication...

CVE-2026-76724: Improper Neutralization of Special Elements used in a Command

A command injection vulnerability exists in CLI of the affected HPE Networking Instant ON APs that could allow an unauthenticated adjacent attacker to perform command injection by sending specially crafted packets. Successful exploitation could allow an attacker to execute arbitrary commands as a...

CVE-2026-93803

A flaw was found in the Linux kernel's libipw wireless network driver. This flaw allows an adjacent attacker within wireless network range to cause a Denial of Service DoS by crashing the system. By sending a specially crafted wireless packet, an attacker can trigger an out-of-bounds memory read...

CVE-2026-96651 Plex Media Server path traversal

Plex Media Server before 1.43.3.10861 builds a file path from the url parameter without checking it for ../ sequences, allowing path traversal via '/system/agents/media/get'. A remote attacker with a valid session token could read any file that the target user can access. This access includes the...

Server-side Request Forgery (SSRF)

Overview @tauri-apps/plugin-http is a Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the HTTP plugin's redirect-following logic, which checks the URL scope only against the initial URL requested by the frontend and not against subsequent redirect hops. A...

CVE-2026-20323

A vulnerability in the sftunnel inter-device communication protocol of Cisco Secure FMC Software and Cisco Secure FTD Software could allow an unauthenticated, adjacent attacker to impersonate the peer device and obtain access at the level of the manager role, which is equivalent to root. This...

CVE-2026-20222

A vulnerability in the EIGRP implementation in Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, adjacent attacker to cause the device to reload unexpectedly, resulting in a denial of service DoS...

CVE-2026-20071

Cisco ISE contains a session hijack vulnerability in its SSID bring-your-own-device (BYOD) onboarding workflow . The root cause is insufficient authentication checks performed while a user is being onboarded. An unauthenticated, adjacent attacker can exploit this by spoofing the legitimate user a...

CVE-2026-20222 Cisco Secure Adaptive Security Appliance Software and Secure Firewall Threat Defense Software EIGRP Denial of Service Vulnerability

A vulnerability in the EIGRP implementation in Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, adjacent attacker to cause the device to reload unexpectedly, resulting in a denial of service DoS...

CVE-2026-20222 Cisco Secure Adaptive Security Appliance Software and Secure Firewall Threat Defense Software EIGRP Denial of Service Vulnerability

A vulnerability in the EIGRP implementation in Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, adjacent attacker to cause the device to reload unexpectedly, resulting in a denial of service DoS...

Arista Networks EOS 4.36.1F Multiple Vulnerabilities (SA0150)

The version of Arista Networks EOS running on the remote device is affected by multiple vulnerabilities as referenced in security advisory SA0150. - On Arista EOS 4.36.1F configured as an 802.1X authenticator with per-supplicant access control lists, an adjacent attacker can trigger an unexpected...

Arista Networks EOS 802.1X Per-Supplicant ACL Bypass (SA0150) (CVE-2026-75943)

The version of Arista Networks EOS running on the remote device is affected by an access control bypass vulnerability as referenced in security advisory SA0150. - On affected releases of Arista EOS configured as an 802.1X authenticator with per-supplicant access control lists, traffic from an...

CVE-2026-20071: Authentication Bypass by Spoofing

A vulnerability in the SSID bring-your-own-device BYOD onboarding workflow of Cisco ISE could allow an unauthenticated, adjacent attacker to hijack the onboarding session of another user and access protected 802.1X networks. This vulnerability is due to insufficient authentication checks that are...

CVE-2026-76699 Unauthenticated Buffer Overflow Vulnerability leads to Denial-of-Service in HPE Networking EdgeConnect SD-WAN Gateways

A buffer overflow vulnerability exists in a system service within the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways that could allow an unauthenticated adjacent attacker to cause a denial-of-service. Successful exploitation could allow an attacker to crash the impacted...