EUVD-2026-66359

The OpenRGB network protocol allows to write attacker controlled strings into arbitrary file system paths extension of CVE-2026-59682. This allows either a full system compromise from local or remote if the daemon is running as root or a full account takeover if the daemon is running in user...

CVE-2026-84374 Laravel Excel writes exports outside the configured filesystem disk when given a caller-controlled path

Laravel Excel provides supercharged Excel exports and imports in Laravel. From 3.1.8 until 3.1.70, in src/Files/Disk.php the Maatwebsite\Excel\Files\Disk::copy method resolves the caller-controlled $destination supplied through Excel::store, $export-store, or storeExcel against the process workin...

CVE-2026-84365

Hono is a Web application framework that provides support for any JavaScript runtime. From 4.12.12 until 4.13.5, the fix released for CVE-2026-39408 does not cover every traversal sequence, and toSSG can still write files outside the configured output directory when a route parameter contains...

CVE-2026-73770

An authenticated arbitrary file write vulnerability exists in AOS-CX. Successful exploitation could allow an authenticated malicious actor, under specific conditions outside the attacker's control and following a required action by another user, to create or modify arbitrary files and execute...

CVE-2026-73765

Authenticated path traversal vulnerabilities exist in API endpoints of AOS-CX. Successful exploitation of these vulnerabilities allows an attacker to write arbitrary files to the underlying operating system, which could lead to remote code execution...

CVE-2026-73752

An unauthenticated arbitrary file write vulnerability exists in an API endpoint of AOS-CX. Successful exploitation of this vulnerability allows an attacker to write arbitrary files to the underlying operating system, which could lead to remote code execution...

CVE-2026-73770 Authenticated Arbitrary File Write Vulnerability Leading to Remote Code Execution in AOS-CX

An authenticated arbitrary file write vulnerability exists in AOS-CX. Successful exploitation could allow an authenticated malicious actor, under specific conditions outside the attacker's control and following a required action by another user, to create or modify arbitrary files and execute...

EUVD-2026-69633

An authenticated arbitrary file write vulnerability exists in AOS-CX. Successful exploitation could allow an authenticated malicious actor, under specific conditions outside the attacker's control and following a required action by another user, to create or modify arbitrary files and execute...

CVE-2026-73770

CVE-2026-73770 is an authenticated arbitrary file write vulnerability in AOS-CX (HPE ArubaOS for campus switching). A malicious actor with authenticated access can, under specific conditions outside their control and requiring action by another user, create or modify arbitrary files and execute c...

CVE-2026-73770 Authenticated Arbitrary File Write Vulnerability Leading to Remote Code Execution in AOS-CX

An authenticated arbitrary file write vulnerability exists in AOS-CX. Successful exploitation could allow an authenticated malicious actor, under specific conditions outside the attacker's control and following a required action by another user, to create or modify arbitrary files and execute...

CVE-2026-73765 Authenticated Path Traversal Vulnerabilities Lead to Remote Code Execution in AOS-CX

Authenticated path traversal vulnerabilities exist in API endpoints of AOS-CX. Successful exploitation of these vulnerabilities allows an attacker to write arbitrary files to the underlying operating system, which could lead to remote code execution...

CVE-2026-73765 Authenticated Path Traversal Vulnerabilities Lead to Remote Code Execution in AOS-CX

Authenticated path traversal vulnerabilities exist in API endpoints of AOS-CX. Successful exploitation of these vulnerabilities allows an attacker to write arbitrary files to the underlying operating system, which could lead to remote code execution...

EUVD-2026-69629

Authenticated path traversal vulnerabilities exist in API endpoints of AOS-CX. Successful exploitation of these vulnerabilities allows an attacker to write arbitrary files to the underlying operating system, which could lead to remote code execution...

CVE-2026-73765

Authenticated path traversal vulnerabilities in API endpoints of HPE AOS-CX (ArubaOS CX) allow an attacker with valid credentials to write arbitrary files to the underlying operating system, potentially leading to remote code execution . The CVSS v3.1 base score is 7.2 (HIGH) , reflecting network...

CVE-2026-73752

An unauthenticated arbitrary file write vulnerability exists in an API endpoint of AOS-CX (HPE). Successful exploitation allows an attacker to write arbitrary files to the underlying operating system, potentially leading to remote code execution . The CVSS 3.1 base score is 8.8 (HIGH) , with an a...

CVE-2026-73752 Unauthenticated Arbitrary File Write Vulnerability Leads to Remote Code Execution in AOS-CX

An unauthenticated arbitrary file write vulnerability exists in an API endpoint of AOS-CX. Successful exploitation of this vulnerability allows an attacker to write arbitrary files to the underlying operating system, which could lead to remote code execution...

EUVD-2026-69616

An unauthenticated arbitrary file write vulnerability exists in an API endpoint of AOS-CX. Successful exploitation of this vulnerability allows an attacker to write arbitrary files to the underlying operating system, which could lead to remote code execution...

CVE-2026-73752 Unauthenticated Arbitrary File Write Vulnerability Leads to Remote Code Execution in AOS-CX

An unauthenticated arbitrary file write vulnerability exists in an API endpoint of AOS-CX. Successful exploitation of this vulnerability allows an attacker to write arbitrary files to the underlying operating system, which could lead to remote code execution...

CVE-2026-84365 Hono: Incomplete fix for CVE-2026-39408: `toSSG()` still writes files outside the output directory

Hono is a Web application framework that provides support for any JavaScript runtime. From 4.12.12 until 4.13.5, the fix released for CVE-2026-39408 does not cover every traversal sequence, and toSSG can still write files outside the configured output directory when a route parameter contains...

CVE-2026-73719

An arbitrary file write vulnerability exists in the API of HPE Networking Fabric Composer and could allow an authenticated administrative user to escalate privileges. Successful exploitation of this vulnerability may enable the attacker to execute arbitrary system commands with root privileges on...