1587 matches found
CVE-2026-23813
CVE-2026-23813 — AOS-CX Pre-Auth Authentication Bypass Unauthenticated remote attackers can reach the AOS-CX management REST API by smuggling a login token through nginx's over-permissive version regex, exposing the OVSDB-backed configuration surface including the hashed admin credential. CVE:...
CVE-2025-13796-PoC
CVE-2025-13796-PoC deco-cx apps Parameter analyticsScript.ts AnalyticsScript server-side request forgery PoC : curl --path-as-is -i -s -k -X $'GET' \ -H $'Host: x.x.x.x' \ $'http://x.x.x.x/live/invoke/website/loaders/analyticsScript.ts?url=file:///etc/passwd'...
Tanium endpoint configuration toolset solution buffer error vulnerability
Versions prior to 1.71.25, 1.59.50, and 1.51.60 of the Tanium endpoint configuration toolset, as well as versions prior to 1.17.802, 1.18.2732, 1.19.2213, 1.20.2271, and 1.21.1673 of Tanium Threat-Response-CX contain a buffer error vulnerability stemming from an out-of-bounds read, which may lead...
Tanium endpoint configuration toolset solution resource management error vulnerability
The Tanium endpoint configuration toolset versions from 1.51 up to 1.51.60, 1.59 up to 1.59.50, and 1.71 up to 1.71.25 contain a resource management error vulnerability stemming from use-after-free issues. This vulnerability affects Tanium threat-response-cx versions prior to 1.17.802, 1.18.2732,...
Tanium endpoint configuration toolset solution buffer error vulnerability
The Tanium endpoint configuration toolset versions prior to 1.51 through 1.51.60, 1.59 through 1.59.50, and 1.71 through 1.71.25, as well as Tanium Index-CX versions prior to 3.9.520, 3.11.443, 3.14.917, 3.14.921, 3.15.2420, and 3.16.984 contain a buffer error vulnerability. This vulnerability...
MASAR: Multi-Stage Attack Surface Analysis and Reasoning Framework for Telecom Networks
The increasing complexity of modern telecommunications networks introduces security challenges that require systematic threat analysis. However, a gap remains between architectural threat modeling frameworks, such as Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, and...
When Core-Network Elements Become Reachable: Field-Level Exploitability Analysis in Diameter
The increasing exposure of cellular core-network elements to public networks has turned Diameter signaling interfaces into a practical attack surface. While large language models LLMs show promise for protocol exploitability analysis, we find that their judgments on Diameter can be unreliable...
CVE-2026-100902
A vulnerability was determined in Barco ClickShare CX-20 Gen2 up to 02.26.00.0007. Affected by this issue is some unknown functionality of the file /wallpaper of the component Wallpaper Upload. This manipulation of the argument wallpaper causes improper validation of syntactic correctness of inpu...
EUVD-2026-88069
A vulnerability was determined in Barco ClickShare CX-20 Gen2 up to 02.26.00.0007. Affected by this issue is some unknown functionality of the file /wallpaper of the component Wallpaper Upload. This manipulation of the argument wallpaper causes improper validation of syntactic correctness of inpu...
CVE-2026-100902 Barco ClickShare CX-20 Gen2 Wallpaper Upload wallpaper improper validation of syntactic correctness of input
A vulnerability was determined in Barco ClickShare CX-20 Gen2 up to 02.26.00.0007. Affected by this issue is some unknown functionality of the file /wallpaper of the component Wallpaper Upload. This manipulation of the argument wallpaper causes improper validation of syntactic correctness of inpu...
CVE-2026-100902
The Barco ClickShare CX-20 Gen2 (up to version 02.26.00.0007 ) is vulnerable to a denial of service (DoS) condition. The flaw resides in an unknown functionality within the /wallpaper file of the Wallpaper Upload component. By manipulating the wallpaper argument, an attacker can initiate a remote...
CVE-2026-100902 Barco ClickShare CX-20 Gen2 Wallpaper Upload wallpaper improper validation of syntactic correctness of input
A vulnerability was determined in Barco ClickShare CX-20 Gen2 up to 02.26.00.0007. Affected by this issue is some unknown functionality of the file /wallpaper of the component Wallpaper Upload. This manipulation of the argument wallpaper causes improper validation of syntactic correctness of inpu...
CVE-2026-100902: Improper Validation of Syntactic Correctness of Input
A vulnerability was determined in Barco ClickShare CX-20 Gen2 up to 02.26.00.0007. Affected by this issue is some unknown functionality of the file /wallpaper of the component Wallpaper Upload. This manipulation of the argument wallpaper causes improper validation of syntactic correctness of inpu...
PT-2026-99758
Name of the Vulnerable Software and Affected Versions Barco ClickShare CX-20 Gen2 versions prior to 02.26.00.0008 Description An issue exists in the Wallpaper Upload component within the /wallpaper file. Improper validation of the syntactic correctness of the wallpaper argument allows a remote...
Malicious code in cx-api-client-lite (npm)
Source: ossf-package-analysis 315d3186e692fd6934de0d66c25255e03eb763a15daa0785e92e58a2abbbba60 The OpenSSF Package Analysis project identified 'cx-api-client-lite' @ 200.0.1 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious...
Malicious code in cx-log (npm)
The package cx-log was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in cx-web-themes (npm)
Source: ossf-package-analysis 4311da313c4de72f9e25c5c573ce6a9ebe1bd2cb1c24d5b37af1e4e6d23717ab The OpenSSF Package Analysis project identified 'cx-web-themes' @ 200.0.1 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activit...
Vulnerabilities found in Aruba Networks ArubaOS-CX
Aruba Networks has identified several vulnerabilities in the AOS-CX network operating system and its related components, including the command line interface, API endpoints, and web-based management interface. The vulnerabilities in AOS-CX include unauthorized access through authentication...