CVE-2026-76737: Improper Limitation of a Pathname to a Restricted Directory

An authenticated path traversal vulnerability exists in the command line interface of HPE Networking Instant On. Successful exploitation could allow an attacker with administrative access to modify a limited set of files on the underlying operating system and to interrupt the normal operation of...

CVE-2026-76736: Improper Restriction of Operations within the Bounds of a Memory Buffer

A buffer overflow vulnerability exists in the underlying operating system of HPE Networking Instant On. Successful exploitation could allow a low-privilege authenticated local attacker to interrupt the normal operation of the affected service...

PT-2026-102871

🚨 CVE-2026-76727 Command injection vulnerabilities exist in the affected interface of HPE Networking Instant ON that could allow an authenticated remote attacker with high privileges to perform command injection. Successful exploitation could allow an attacker to execute arbitrary commands as a...

CVE-2026-76728: Server-Side Request Forgery (SSRF)

A vulnerability in the API endpoint of HPE Networking Instant ON APs could allow an authenticated remote attacker with high privileges to conduct a server-side request forgery SSRF attack. Successful exploitation could allow an attacker to execute arbitrary commands as a privileged user on the...

CVE-2026-76733: Uncontrolled Resource Consumption

A denial-of-service vulnerability exists in the API endpoint of HPE Networking Instant On that could allow an authenticated attacker with administrative privileges to cause a denial of service. Successful exploitation could allow an attacker to interrupt the normal operation of the affected...

CVE-2026-76721: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow vulnerability exists in the affected interface of HPE Networking Instant ON that could allow an unauthenticated remote attacker to run arbitrary code on the underlying host. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the...

PT-2026-102874

An authentication bypass vulnerability exists in the PAPI protocol of HPE Networking Instant ON APs that could allow an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to circumvent certain existing authentication...

PT-2026-102877

A denial-of-service vulnerability exists in the API endpoint of HPE Networking Instant On that could allow an authenticated attacker with administrative privileges to cause a denial of service. Successful exploitation could allow an attacker to interrupt the normal operation of the affected...

CVE-2026-76730: Improper Authentication

An authentication bypass vulnerability exists in the PAPI protocol of HPE Networking Instant ON APs that could allow an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to circumvent certain existing authentication...

The vulnerability of the Adobe Connect instant messaging program, related to insufficient validation of input data, allows a hacker to execute arbitrary code.

The vulnerability of the Adobe Connect instant messaging program is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the Adobe Connect instant messaging program lies in the lack of protective measures for the website structure, allowing attackers to escalate their privileges.

The vulnerability of the Adobe Connect instant messaging program relates to the lack of security measures for the website structure. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

The vulnerability of the Adobe Connect instant messaging program, related to the lack of protective measures for the SQL query structure, allows attackers to execute arbitrary code.

The vulnerability of the Adobe Connect instant messaging program relates to the lack of security measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the Adobe Connect instant messaging program, related to the lack of protective measures for the website structure, allows attackers to execute arbitrary code.

The vulnerability of the Adobe Connect instant messaging program relates to the lack of security measures for the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the Adobe Connect instant messaging program lies in the lack of protective measures for the website structure, allowing attackers to escalate their privileges.

The vulnerability of the Adobe Connect instant messaging program relates to the lack of security measures for the website structure. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

The vulnerability of the Adobe Connect instant messaging program lies in the lack of protective measures for the website structure, allowing attackers to escalate their privileges.

The vulnerability of the Adobe Connect instant messaging program relates to the lack of measures taken to protect the website structure. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

CVE-2026-76734: Improper Restriction of Operations within the Bounds of a Memory Buffer

A memory corruption vulnerability in the affected interface of HPE Networking Instant On could allow an unauthenticated remote attacker to conduct a denial of service attack. Successful exploitation could allow an attacker to interrupt the normal operation of the affected service and to access so...

HPESBNW05150 rev.1 - Multiple Vulnerabilities in HPE Networking Instant On APs

Potential Security Impact: Local: Access Restriction Bypass, Escalation of Privilege; Remote: Access Restriction Bypass, Code Execution, Denial of Service DoS, Server-Side Request Forgery SSRF SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Networking Instant On Access Points...

HPESBNW05138 rev.1 - HPE Networking Advance Notification of Security Advisories for September 29, 2026

Potential Security Impact: Local: Access Restriction Bypass SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Networking Instant On Access Points AP11 - Please refer to the "IMPORTANT NOTE" in the Vulnerability Section of this Security Bulletin for more information. HPE Networki...

The vulnerability of the Skype for Business Server’s instant messaging program, related to errors in verifying cryptographic signatures, allows attackers to carry out spoofing attacks.

The vulnerability of the Skype for Business Server’s instant messaging program is related to errors in verifying the cryptographic signature. Exploiting this vulnerability could allow a malicious actor to carry out spoofing attacks remotely...

CVE-2026-15947

The Metasync plugin for WordPress (also referenced as Search Atlas SEO ) is vulnerable to unauthorized data modification in versions up to and including 2.6.23 . The root cause is a missing capability check on the save_instant_indexing_settings() function registered on the admin_init hook, which ...