PT-2026-121641

Name of the Vulnerable Software and Affected Versions AOS-10 affected versions not specified Description Command injection flaws in the affected interface allow an authenticated remote attacker with high privileges to execute arbitrary commands as a privileged user on the underlying operating...

HPE ArubaOS security vulnerabilities

A security vulnerability exists in HPE ArubaOS. It stems from a command injection flaw in affected interfaces, which may allow authenticated, highly privileged remote attackers to execute commands on the underlying operating system via relevant mechanisms...

HPE ArubaOS security vulnerabilities

A security vulnerability exists in HPE ArubaOS. It stems from a flaw in the handling of CLI commands within the web interface. Authenticated remote attackers can execute arbitrary operating system commands, potentially leading to a system compromise...

Dell Alienware Command Center < 6.14.54.0 Least Privilege Violation (DSA-2026-418)

The version of Dell Alienware Command Center AWCC installed on the remote host is prior to 6.14.54.0. It is, therefore, affected by a least privilege violation vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to elevation of privileg...

Rocky Linux 10.2 [CIQ] Security Update: lrzsz / lrzsz-debuginfo / lrzsz-debugsource Multiple Vulnerabilities (crlsa-2026_86056)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202686056 advisory. lrzsz: lrzsz: Arbitrary file overwrite via absolute path traversal in restricted mode CVE-2026-105840 lrzsz: lrzsz: Arbitrary command execution via...

HPE ArubaOS security vulnerabilities

A security vulnerability exists in HPE ArubaOS. It stems from a flaw in authentication mechanisms on affected interfaces, allowing unauthenticated remote attackers to bypass existing authentication checks and execute arbitrary commands on the underlying host. Successful exploitation of this...

PT-2026-121638

Name of the Vulnerable Software and Affected Versions AOS-8 affected versions not specified Description Command injection flaws in the affected interface allow an authenticated remote attacker with high privileges to execute arbitrary commands on the underlying operating system. These commands ru...

PT-2026-121628

Name of the Vulnerable Software and Affected Versions AOS-8 affected versions not specified Description Multiple web interface endpoints in AOS-8 devices are susceptible to a buffer overflow when processing specially crafted requests. This flaw allows an unauthenticated remote attacker to execute...

HPE ArubaOS security vulnerabilities

A security vulnerability exists in HPE ArubaOS. It stems from a command injection flaw in the PAPI protocol. An attacker adjacent to the target can send specially crafted packets to achieve unauthenticated remote code execution. Successful exploitation of this vulnerability allows arbitrary code...

HPE ArubaOS security vulnerabilities

A security vulnerability exists in HPE ArubaOS. It stems from a command injection flaw in the affected interfaces. Under certain preconditions that are not controlled by attackers, unauthenticated remote attackers can execute arbitrary commands on the underlying host. Exploitation of this...

HPE ArubaOS security vulnerabilities

A security vulnerability exists in HPE ArubaOS. It stems from flaws in multiple web interface endpoints on the device. Attackers can exploit this by crafting specially designed requests to trigger a buffer overflow, potentially allowing them to execute arbitrary commands on the underlying operati...

HPE ArubaOS security vulnerabilities

A security vulnerability exists in HPE ArubaOS. It stems from an unauthenticated command injection flaw in the command-line interface. Attackers with physical access can exploit this vulnerability to execute arbitrary commands as a privileged user on the underlying operating system, leading to a...

PT-2026-121593

Name of the Vulnerable Software and Affected Versions AOS-10 affected versions not specified Description A flaw in the affected interface of AOS-10 allows an unauthenticated remote attacker to perform SQL injection attacks. SQL injection is a technique where malicious SQL statements are inserted...

KiloView E3 firmware command injection vulnerability

Versions of the KiloView E3 firmware prior to 1.30 contain a command injection vulnerability. This vulnerability arises because network management services fail to validate the names of network interfaces before passing them to shell commands; as a result, authenticated web users with network...

HPE ArubaOS security vulnerabilities

A security vulnerability exists in HPE ArubaOS. It stems from command injection in the PAPI protocol; sending specially crafted packets to affected UDP ports can lead to unauthenticated remote code execution. This may allow attackers to execute arbitrary code as a privileged user on the underlyin...

PT-2026-121587

Name of the Vulnerable Software and Affected Versions AOS-8 affected versions not specified Description An unauthenticated remote attacker can perform SQL injection attacks against the affected interface of AOS-8. This flaw could lead to the execution of arbitrary commands on the underlying...

PT-2026-121393

Name of the Vulnerable Software and Affected Versions EmberZNet versions prior to 9.1.2 Description A malformed Discover Attributes command can cause an infinite loop with an unreachable exit condition. This issue specifically affects devices that support manufacturer-specific clusters and requir...

Goose information disclosure vulnerability

Goose has a vulnerability related to information disclosure. This vulnerability arises because when the integration feature for Goose terminals is enabled, it captures shell command history and sends it word-by-word to a configured LLM provider endpoint without any sanitization. When users input...

HPE ArubaOS security vulnerabilities

A security vulnerability exists in HPE ArubaOS. It stems from a command injection flaw in affected interfaces, allowing unauthenticated neighboring attackers to perform command injection attacks. Successful exploitation of this vulnerability enables arbitrary commands to be executed as privileged...

HPE ArubaOS security vulnerabilities

HPE ArubaOS 8 has a security vulnerability stemming from a Server-Side Request Forgery SSRF flaw in its command-line interface. Privileged authenticated remote attackers can exploit this vulnerability to perform SSRF attacks, potentially allowing them to execute arbitrary commands on the underlyi...